EIP-2026-102479

This exploit demonstrates an HTML injection vulnerability in dotCMS 5.1.1 by uploading a file with a malicious filename containing an XSS payload. The payload is executed when the file is processed or rendered by the application.