EIP-2026-105328

This exploit demonstrates two XSS vulnerabilities in Availability Booking Calendar v1.0: one via the promo code field and another via SVG file upload. Both are confirmed with HTTP request/response examples.