EIP-2026-105506

This exploit demonstrates stored XSS vulnerabilities in BlackCat CMS 1.3.6 by injecting malicious scripts into the 'Module / language name' and 'Group name' fields. The payload executes when the affected pages are visited or updated.