EIP-2026-107188

This is a working proof-of-concept for a persistent XSS vulnerability in Fork CMS 5.8.0, where malicious script code can be injected via the 'Displayname' field during user registration or profile editing, leading to execution in admin panels.