EIP-2026-118989

This exploit demonstrates an HTML injection vulnerability in Opera browser due to insufficient URL sanitization when handling local image or media files. The PoC uses a crafted file:// URL with embedded JavaScript to trigger an alert, confirming the vulnerability.