EIP-2026-104362

This exploit demonstrates a stored XSS vulnerability in NoteMark versions 0.13.0 and below. The payload is injected via a markdown link with a JavaScript URI, which executes when the rendered note is viewed.