EIP-2026-106077

This exploit demonstrates a stored XSS vulnerability in Comment System 1.0 by injecting malicious JavaScript into the 'Your Name' and 'Comment' fields. The payload executes when the page is loaded, stealing cookies via an alert popup.