EIP-2026-109115

This exploit demonstrates a stored XSS vulnerability in Library System in PHP 1.0 by injecting a malicious script into the publisher name field, which executes when viewed. The PoC requires admin authentication and leverages insufficient input sanitization.