EIP-2026-104859

This exploit demonstrates an HTML injection vulnerability in 60cycleCMS, where user-supplied input is not properly sanitized. The PoC shows how an attacker can inject malicious scripts into the 'title' and 'body' parameters, leading to stored XSS.