EIP-2026-105820

This exploit demonstrates an authenticated persistent XSS vulnerability in ChemInv 1.0. The vulnerability arises from insufficient sanitization of user input in the project name field, allowing malicious JavaScript to be stored in the database and executed when other users view the 'Projects' or 'Add Chemicals' tab.