EIP-2026-111973

This is a functional proof-of-concept for a stored XSS vulnerability in SelectaPix 1.4.1. The exploit demonstrates how an attacker can inject malicious JavaScript into the 'uploadername' parameter, which executes in the context of the victim's browser when the form is submitted.