EIP-2026-114565

This exploit demonstrates a stored XSS vulnerability in Zabbix 3.4.7 by injecting malicious JavaScript into a dashboard widget name, which executes when viewed. The payload creates a new admin user via a POST request to 'users.php'.