EIP-2026-105535

This exploit demonstrates a stored XSS vulnerability in Blood Bank v1.0 via the `updateprofile.php` file, where insufficient input validation allows script injection into parameters like `rname`, `remail`, `rphone`, and `rcity`. The PoC includes a payload that triggers an alert when the profile is viewed.