EIP-2026-105874

This exploit demonstrates a stored XSS vulnerability in Clansphere CMS 2011.4 by injecting a malicious script into the 'username' field of the buddy list creation form. The payload executes when the page is viewed, confirming the vulnerability.