EIP-2026-110336

This exploit demonstrates a reflected XSS vulnerability in OrangeHRM 2.6.2 by injecting a malicious script via the 'recruitcode' parameter in the jobVacancy.php template. The PoC uses a simple alert(0) payload to confirm the vulnerability.