EIP-2026-110209

This is a functional proof-of-concept for a stored XSS vulnerability in Onyx 0.3.2. It demonstrates how an attacker can inject malicious JavaScript into the application's settings and category forms, which will execute in the context of an admin user's browser.