EIP-2026-112208

The exploit demonstrates a cross-site scripting (XSS) vulnerability in SLAED CMS 2.0 due to improper input sanitization. The PoC URL injects a malicious script tag via the 'stop' parameter, which executes arbitrary JavaScript in the context of the affected site.