EIP-2026-113309

This exploit demonstrates a stored XSS vulnerability in WEBIGniter v28.7.23 by injecting a malicious script into the category name field, which executes when the category is viewed. The PoC includes a detailed HTTP request showing the payload delivery.