EIP-2026-100605

This advisory details two vulnerabilities in VisualSite CMS 1.3: a logical bug allowing admin login lockout via SQL injection and a persistent XSS in the admin section. The analysis includes vulnerable code snippets and exploitation steps.