EIP-2026-112468

This exploit demonstrates a stored XSS vulnerability in Subrion CMS 4.2.1 by injecting a malicious script into the tooltip field, which executes when accessing the members add page.