EIP-2026-104627

This exploit demonstrates HTML injection vulnerabilities in Croogo CMS 1.3.4, allowing attacker-supplied HTML and script code to execute in the context of the affected browser. The PoC includes payloads for XSS via iframe injection in admin user and role management pages.