EIP-2026-111093

This is a working proof-of-concept for a persistent XSS vulnerability in PHPJabbers Simple CMS v5. The exploit demonstrates how an authenticated attacker with moderator privileges can inject malicious JavaScript payloads via the 'name' parameter in user creation/update actions, leading to session hijacking or phishing attacks.