EIP-2026-112657

This exploit demonstrates a stored XSS vulnerability in 'thesystem App 1.0' by injecting malicious HTML/JavaScript via a POST request to '/data/', which is then reflected in the response from '/show_search/'. The lack of proper input sanitization and authentication enforcement allows the payload to persist and execute.