EIP-2026-105691

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Calendar Express due to improper input sanitization. The PoC shows how arbitrary script code can be executed in the context of the affected site via a crafted URL.