EIP-2026-107590

This is a writeup detailing a persistent XSS vulnerability in Hexjector v1.0.7.2 and below. The vulnerability arises from unfiltered user input in the `$url2` variable, allowing arbitrary JavaScript execution. The document provides multiple exploitation methods but does not include executable exploit code.