EIP-2026-102237

This is a writeup detailing a persistent XSS vulnerability in Folder Plus v2.5.1 iOS app. The vulnerability allows script injection via the 'create folder' function, executed when a higher-privileged user deletes the item.