EIP-2026-112168

This is a functional proof-of-concept for a stored XSS vulnerability in SiNG CMS 2.9.0. The exploit demonstrates how an attacker can inject arbitrary JavaScript code via the 'email' parameter in the password recovery form, which executes in the context of the victim's browser.