EIP-2026-112263

This exploit demonstrates a cross-site scripting (XSS) vulnerability in sNews 1.7 by injecting malicious JavaScript into form fields. The PoC submits crafted input to the application, which fails to sanitize user-supplied data, leading to arbitrary script execution in the context of the affected browser.