EIP-2026-107670

This exploit demonstrates a stored XSS vulnerability in HTMLy CMS version 2.9.6 by injecting malicious JavaScript into the 'Blog title' field in the admin configuration panel. The payload triggers an alert dialog upon rendering the compromised page.