EIP-2026-109184

This exploit demonstrates an HTML injection vulnerability in LiveJournal via CSS tags, allowing arbitrary script execution (XSS) through the 'expression' property in CSS. The PoC uses a style tag to inject JavaScript that alerts the document cookie, proving the vulnerability.