EIP-2026-109142

This exploit demonstrates a stored XSS vulnerability in LimeSurvey 4.1.11+200316 via the 'Permission Roles' functionality. The PoC sends a crafted HTTP POST request to inject malicious JavaScript into the 'name' and 'description' fields of a permission role.