EIP-2026-119431

The exploit demonstrates multiple stored XSS vulnerabilities in SonicDICOM PACS 2.3.2 via unsanitized POST parameters in the settings, sendsettings, and providers APIs. The PoC includes HTML forms that submit malicious scripts, which are stored and executed in the context of the affected site.