EIP-2026-109201

This exploit demonstrates a stored XSS vulnerability in log1 CMS 2.0 by injecting malicious JavaScript into the 'content' parameter, which is then submitted via a hidden form. The vulnerability allows arbitrary script execution in the context of the webserver process.