EIP-2026-106960

This exploit demonstrates a stored XSS vulnerability in Expense Tracker 1.0, where an attacker can inject malicious JavaScript payloads into the 'Expense Name' field. The payload executes when an admin or user accesses the compromised section, potentially leading to cookie theft.