EIP-2026-113111

This is a technical writeup describing a persistent XSS vulnerability in Virtual Airlines Manager 2.6.2. It provides step-by-step instructions to exploit the vulnerability by injecting JavaScript into the 'Subject' field of an internal mail message, demonstrating how session IDs can be stolen.