EIP-2026-109593

This exploit demonstrates a stored XSS vulnerability in Mouse Media Script v1.6, where an attacker can inject malicious JavaScript via the 'Title' or 'Description' fields during image upload. The payload executes when other users visit the homepage, stealing cookies or performing other malicious actions.