EIP-2026-113871

The exploit demonstrates a stored XSS vulnerability in Live Chat Unlimited v2.8.3, allowing arbitrary JavaScript execution via crafted input in the chat window. The payloads provided can steal admin cookies or trigger alerts, confirming the vulnerability.