EIP-2026-104204

The exploit demonstrates a stored XSS vulnerability in CMU CERT/CC VINCE 2.0.6 by injecting malicious HTML/JS via the 'content' POST parameter. The provided curl command shows how an authenticated attacker can inject arbitrary code into the application.