EIP-2026-114608

The exploit describes a persistent XSS vulnerability in ZenPhoto 1.4.0.3 due to improper sanitization of the 'x-forwarded-for' HTTP header in security logs. The PoC demonstrates how an attacker can inject malicious HTML code, which is then displayed in the admin logs.