EIP-2026-113356

The exploit demonstrates SQL injection and XSS vulnerabilities in Websitebaker Add-on 'Concert Calendar 2.1.4'. The SQLi occurs due to unsanitized user input in the 'date' parameter, while the XSS is triggered by reflecting the same parameter without proper encoding.