EIP-2026-105205

This exploit demonstrates a stored XSS vulnerability in ApPHP MicroCMS 3.9.5 via the comment_user_name parameter. The payload is injected into the comment section and triggers when the page is loaded.