EIP-2026-104348

This exploit demonstrates a stored XSS vulnerability in Nagios Log Server 2.1.7 by manipulating the 'snapshot_name' parameter in a POST request to '/nagioslogserver/configure/create_snapshot'. The payload is stored and executed when users access a crafted link.