EIP-2026-109580

This exploit demonstrates a stored XSS vulnerability in Moodle 3.10.3 by injecting a malicious payload into the course description field. The payload executes JavaScript when the course description is viewed or modified.