EIP-2026-110233

This exploit demonstrates a persistent XSS vulnerability in Open Realty 2.x and 3.x due to lack of input validation in the 'save_search' function and output validation in the 'view_saved_searches' function. The PoC shows how arbitrary JavaScript can be injected and stored in the database, then executed when viewed.