EIP-2026-111540

The exploit demonstrates multiple persistent and non-persistent XSS vulnerabilities in ProjectSend r582. It includes curl commands and payloads that inject malicious scripts into search boxes and user input fields, affecting both clients and admins.