EIP-2026-110351

This is a functional proof-of-concept for a stored XSS vulnerability in osCmax 2.0.25. The exploit submits a crafted form with malicious JavaScript in the 'articles_description' fields, which executes when rendered in the admin interface.