EIP-2026-113289

This exploit demonstrates a stored XSS vulnerability in WebHMI 4.1.1.7662, where an authenticated attacker can inject malicious JavaScript into the Title field of a dashboard or register, leading to session cookie theft.