EIP-2026-102221

This is a writeup describing a persistent XSS vulnerability in ChatSecure IM v2.2.4 iOS. The vulnerability allows script injection via the message body context, leading to session hijacking or phishing. The PoC payload demonstrates an embedded SVG object with malicious script execution.