EIP-2026-112150

The exploit demonstrates multiple XSS vulnerabilities in SimpleNotes by injecting malicious JavaScript via unsanitized parameters (RootID, SnoteID, MaxLevel, MoveWhat). The PoC URLs show how arbitrary script execution can occur in the context of the affected site.