EIP-2026-106969

The exploit demonstrates multiple vulnerabilities in Exponent CMS 2.6, including stored XSS, database credential disclosure, and authentication brute-forcing. It provides functional code for brute-forcing usernames and passwords, as well as a proof-of-concept for XSS and credential exposure.