EIP-2026-109620

This exploit demonstrates a stored XSS vulnerability in MTP Image Gallery 1.0 by injecting malicious scripts into the 'title' parameter via POST requests to 'edit_photos.php' and 'add_cat.php'. The PoC includes HTML forms that submit payloads to trigger the vulnerability.