EIP-2026-107751

This exploit demonstrates a stored XSS vulnerability in Icy Phoenix 1.3.0.53a via the HTTP Referer header. The vulnerability allows an attacker to inject malicious JavaScript, which is then stored and executed when an admin views the 'HTTP referrers' section.