EIP-2026-112895

This exploit demonstrates a cross-site scripting (XSS) vulnerability in UMI CMS due to insufficient sanitization of user-supplied input. The PoC provides a URL that injects a script tag to execute arbitrary JavaScript in the context of the affected site.