EIP-2026-106014

This exploit demonstrates a reflected XSS vulnerability in CMSimple 3.3 by injecting a malicious script via the URL. The PoC uses a simple alert to display the user's cookies, proving arbitrary JavaScript execution in the context of the affected site.