EIP-2026-107644

This is a writeup describing a stored XSS vulnerability in Hotel And Lodge Management System 1.0. The vulnerability allows an attacker to inject malicious JavaScript into the 'Customer Name' parameter, which executes when viewed, potentially stealing cookies or redirecting users.