EIP-2026-105989

This exploit demonstrates a stored XSS vulnerability in CMS Made Simple 2.2.15 via SVG file upload. An authenticated attacker can upload a malicious SVG file containing JavaScript, which executes when accessed by other users.