EIP-2026-113472

This exploit demonstrates a stored XSS vulnerability in WonderCMS 3.1.3 by uploading a malicious HTML file via the 'uploadFile' functionality. The payload is triggered when accessing the uploaded file, executing arbitrary JavaScript in the context of the victim's browser.