EIP-2026-109237

This Python script exploits an unauthenticated persistent XSS vulnerability in Madness Pro panel <= 1.14 by injecting a malicious script tag into the 'uid' parameter. The payload is URL-encoded and designed to execute arbitrary JavaScript, such as a BeEF hook, when rendered in the panel.