EIP-2026-112528

This exploit demonstrates multiple HTML injection vulnerabilities in SyndeoCMS 2.9.0 by injecting malicious scripts into form fields, which execute in the context of the affected browser. The PoC includes crafted form submissions targeting specific modules to trigger XSS via unsanitized input.