EIP-2026-114621

The exploit demonstrates a stored XSS vulnerability in ZeroBoardXE 1.1.5 by bypassing the application's input sanitization filters. The PoC uses obfuscated JavaScript in an `<img>` tag's `lowsrc` attribute to execute arbitrary code, leveraging a technique that evades the `removeHackTag` and `removeSrcHack` functions.