EIP-2026-112943

This exploit demonstrates a stored XSS vulnerability in Vacation Rental 1.8, where malicious payloads can be injected into the 'username', 'title', and 'comment' fields of a property review. The payloads are stored and executed when other users visit the affected property page or reviews section.