EIP-2026-107070

This exploit demonstrates a stored XSS vulnerability in Feng Office by injecting a malicious script into the 'customer[name]' field, which executes when shared in the Activity feed. The PoC is straightforward and functional, requiring minimal user interaction.