EIP-2026-109409

This Perl script exploits a persistent XSS vulnerability in MemHT Portal 4.0.1 by injecting malicious JavaScript into the User-Agent header, which is stored and executed when an admin views the statistics page. It requires valid credentials to authenticate and inject the payload.