EIP-2026-100559

The document describes a stored XSS vulnerability in SmarterMail 8.0.4086.25048, where the `ctl00%24MPH%24wucContactInfo%24txtEmailAddress_SettingText` parameter is reflected unmodified in the response, allowing script injection. The analysis includes technical details such as the affected endpoint and payload behavior.