EIP-2026-110171

This exploit demonstrates a persistent XSS vulnerability in Online Scheduling System 1.0, where unsanitized user input in the 'corname' parameter is stored in the database and executed when viewed by other users. The PoC includes a malicious POST request that injects a script tag into the database.