EIP-2026-106242

The exploit demonstrates multiple stored XSS vulnerabilities in Croogo 3.0.2 by providing HTTP POST requests with malicious payloads injected into the 'Content-Type' and 'title' fields. The payloads execute JavaScript to steal cookies, confirming the vulnerability.