EIP-2026-110041

This exploit demonstrates a stored XSS vulnerability in OneCMS 2.6.1 by injecting a malicious script into the 'Short1' parameter, which executes when the form is submitted. The PoC leverages unsanitized user input to steal cookie-based authentication credentials.