EIP-2026-106027

This exploit demonstrates a stored XSS vulnerability in CmsMadeSimple v2.2.17 by injecting a malicious payload into the metadata section of a content page. The payload executes when the page is visited, stealing cookies via JavaScript.