EIP-2026-106279

This exploit demonstrates a stored XSS vulnerability in Curfew e-Pass Management System 1.0. By injecting a malicious script into the 'Full name' parameter, an attacker can execute arbitrary JavaScript in the context of a user's session when viewing the pass.