EIP-2026-107626

This exploit demonstrates a stored XSS vulnerability in Hospitals Patient Records Management System 1.0, where an attacker can inject malicious JavaScript via the 'description' parameter in the room_list page. The payload triggers an alert when the page is accessed, confirming the vulnerability.