EIP-2026-113913

This exploit demonstrates a CSRF and XSS vulnerability in My Calendar 2.4.10. The PoC submits a malicious form to add a category with a script payload, exploiting insufficient input validation and lack of CSRF protection.