EIP-2026-102520

The exploit demonstrates multiple reflected and stored XSS vulnerabilities in OpenFire versions 3.10.2 to 4.0.1. It includes proof-of-concept payloads and curl commands to trigger XSS via various parameters in administrative pages.