EIP-2026-106091

This exploit demonstrates multiple cross-site scripting (XSS) vulnerabilities in CompactCMS 1.4.1 by injecting malicious script tags into user-supplied input fields. The PoC includes examples of reflected XSS via URL parameters and stored XSS via form inputs.