EIP-2026-112266

This is a working proof-of-concept for a stored XSS vulnerability in sNews 1.7. It demonstrates how an attacker can inject arbitrary JavaScript code via the 'website_title' and 'text' variables, leading to potential cookie theft or session hijacking.