EIP-2026-113170

The exploit demonstrates two XSS vulnerabilities in w2wiki: a stored XSS via a crafted POST request to save a malicious page, and a reflected XSS via manipulated URL parameters in edit and search actions. Both payloads use an img tag with an onerror event to trigger JavaScript execution.