EIP-2026-111546

This exploit demonstrates a stored XSS vulnerability in Projeqtor v9.3.1 via SVG file upload. An attacker can upload a malicious SVG file containing JavaScript, which executes when viewed by an administrator, potentially leading to privilege escalation and arbitrary code execution.