EIP-2026-114484

This is a technical writeup detailing two persistent XSS vulnerabilities in XpressEngine 1.4.5.7, affecting administrator interfaces via nickname, homepage, and blog fields. It describes the attack vectors, exploitation conditions, and constraints (e.g., nickname length manipulation).