EIP-2026-110283

This is a writeup detailing stored and reflective XSS vulnerabilities in OpenDocMan 1.2.6.5. It describes how insufficient sanitization in the Description, Comment, and Department name fields allows for arbitrary script execution. The reflective XSS is triggered via the error.php page.