EIP-2026-112542

This is a functional CSRF and Stored XSS exploit for T-dah Webmail. It submits a crafted form to the target application, injecting a malicious script into the 'name' field, which executes when viewed in the address book.