EIP-2026-102472

This exploit demonstrates multiple stored XSS and CSRF vulnerabilities in DALIM SOFTWARE ES Core 5.0 by submitting malicious input via POST parameters to an administrative endpoint. The PoC injects JavaScript payloads into various form fields, which are then rendered in the context of the affected site.