EIP-2026-104299

This exploit demonstrates a stored XSS vulnerability in KEMP LoadMaster v7.1.35.0.13245, allowing an unauthenticated attacker to inject malicious JavaScript into the audit log via SSH login attempts. The injected script creates a new administrative user with full privileges.