CVE-2025-46041

This exploit demonstrates a stored XSS vulnerability in Anchor CMS v0.12.7, where an authenticated user can inject arbitrary JavaScript into the `markdown` field of the page creation interface, leading to script execution when the page is viewed.

This repository contains a writeup detailing a Stored XSS vulnerability in Anchor CMS v0.12.7, where malicious JavaScript can be injected into the `description` field of the page creation interface. The PoC demonstrates execution via an alert payload.