EIP-2026-106112

This advisory details a persistent XSS vulnerability in Composr CMS 10.0.30, where the 'name' parameter in the Usergroup editor is not sanitized, allowing arbitrary script execution when a victim visits the 'Zone editor' area. The report includes a proof-of-concept payload and technical context.