EIP-2026-101252

This is a functional XSS exploit targeting Delta Controls enteliTOUCH versions 3.40.3935 and earlier. The PoC demonstrates a stored XSS via the 'Username' POST parameter, which executes arbitrary JavaScript in the context of the victim's browser session.