EIP-2026-114659

This is a technical writeup detailing an HTML injection vulnerability in Zyncro 3.0.1.20. The vulnerability arises from insufficient sanitization of user-supplied input in group name and description fields, which are base64 encoded in POST requests. An attacker can exploit this to execute arbitrary script code in the context of the affected website.