EIP-2026-105376

This exploit demonstrates a stored XSS vulnerability in Backdrop CMS v1.25.1 by uploading a malicious SVG file containing JavaScript code. The PoC includes a detailed HTTP request showing the file upload process and the resulting XSS payload execution.