EIP-2026-103295

This exploit demonstrates a persistent XSS vulnerability in Mahara CMS v19.10.2, where malicious script code can be injected via the 'nombre' and 'descripción' parameters in the 'Ficheros' module. The payload is executed when higher-privileged users interact with the injected content.