EIP-2026-104191

This is a writeup describing a stored XSS vulnerability in Calibre-web 0.6.21. The exploit involves injecting a malicious script into the 'Comments' field of a book, which executes when viewed in the Book Details section.