EIP-2026-109352

This exploit demonstrates XSS and HTML injection vulnerabilities in Max's Guestbook 1.0. The PoC shows how an attacker can inject malicious scripts or HTML meta tags into the 'Name' field of a guestbook comment to redirect users or execute arbitrary JavaScript.