EIP-2026-107125

This exploit demonstrates a stored XSS vulnerability in FlatCore CMS 2.1.1 by injecting a malicious script into the username field during user account creation. The payload executes when the username is rendered in the application.