EIP-2026-113072

This exploit demonstrates an authenticated stored XSS vulnerability in Vicidial 2.11. The PoC shows how insufficient sanitization in the 'Script Name' and 'Script Text' fields allows arbitrary JavaScript execution when previewing the script.