EIP-2026-119269

The exploit demonstrates a cross-site scripting (XSS) vulnerability in Websense Enterprise by injecting a script tag into the URI of a blocked site. The lack of proper sanitization allows arbitrary JavaScript execution in the context of the error page.