EIP-2026-109052

This exploit demonstrates a persistent XSS vulnerability in Kuicms Php EE 2.0 by injecting malicious JavaScript via a crafted POST request to the BBS reply endpoint. The payload is embedded in the 'content' parameter and executed when rendered in the application.