EIP-2026-111787

This is a working proof-of-concept for a persistent XSS vulnerability in Rocket LMS 1.1, where the 'title' parameter in the support ticket system fails to sanitize user input, allowing script injection. The PoC demonstrates the exploit via a POST request with a malicious payload.