EIP-2026-104338

This advisory describes a stored XSS vulnerability in Metasploit 4.1.0 Web UI, where the 'project[name]' parameter is vulnerable to script injection. The exploit involves creating a new project with a malicious payload in the project name field.