EIP-2026-103977

This XML file demonstrates an HTML injection vulnerability in MagpieRSS 0.72, where malicious script code embedded in RSS feed elements (title/description) executes in the context of the affected browser. The PoC includes a cookie-stealing iframe and a simple XSS alert.