EIP-2026-106849

This is a stored XSS exploit targeting the 'Embed Video Scripts' comments section. The PoC demonstrates how an attacker can inject a malicious script into the 'message' parameter, which is then stored and executed in the context of other users' browsers.