EIP-2026-119098

The exploit demonstrates a cross-site scripting (XSS) vulnerability in Sambar Server by injecting a malicious script via the 'query' parameter in the search functionality. The script executes in the context of the victim's browser, potentially stealing cookie-based authentication credentials.