EIP-2026-112154

This is a working proof-of-concept for a stored XSS vulnerability in Simplephpscripts Simple CMS 2.1. The exploit demonstrates how an authenticated attacker can inject malicious JavaScript payloads into user input fields (name, username, password), which execute when the user list is viewed.