EIP-2026-112558

This exploit demonstrates a stored XSS vulnerability in Task Management System 1.0 by injecting malicious JavaScript into the 'First Name' or 'Last Name' fields. The payload executes when the user logs in again, displaying the domain name via an alert.