EIP-2026-111884

The exploit demonstrates a cross-site scripting (XSS) vulnerability in SamTodo 1.1 by injecting malicious script tags via the 'completed' parameter in the URL. The payload bypasses input sanitization and executes arbitrary HTML/JavaScript in the context of the affected site.