EIP-2026-104980

This exploit demonstrates a persistent XSS vulnerability in Advanced Guestbook 2.4.4 via the 's_emotion' parameter in the admin panel. The PoC shows how an authenticated attacker can inject malicious JavaScript into the smilie description field, which executes when the smilies tab is viewed.