EIP-2026-119681

The exploit demonstrates multiple stored and reflected XSS vulnerabilities in OpenMRS by providing a functional PoC HTML form that submits malicious JavaScript payloads via the 'name' and 'description' parameters. It also lists numerous other vulnerable endpoints and parameters.