EIP-2026-111508

The exploit demonstrates a persistent XSS vulnerability in Private Message PHP Script 2.0 by injecting a malicious JavaScript payload into a textarea, which executes when the target opens the message.