EIP-2026-104427

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Serialsystem 1.0.4 BETA by injecting an arbitrary script via the 'list' parameter in the upload endpoint. The PoC uses an image tag with an onload event to trigger an alert, proving the vulnerability.