EIP-2026-113175

This exploit demonstrates a stored XSS vulnerability in the 'description' field of the FullCalendar-BS4-PHP-MySQL-JSON application. The PoC sends a crafted POST request with malicious JavaScript payloads in the 'title' and 'description' parameters, which are executed when rendered in the web application.