EIP-2026-107227

This is a writeup describing a persistent XSS and file upload vulnerability in Freelancers Marketplace Script. The attacker can inject malicious scripts or shells via the 'describe' section when posting a project, which then executes when viewed on the main projects page.