Exploit for Cross-site Scripting in Exponentcms Exponent_Cms CVE-2017-8085

## https://sploitus.com/exploit?id=8FE41998-0D6E-5C37-89B5-8C5D065A4CB9
# Synthetic Test Case: CVE-2017-8085

**CWE**: CWE-79  
**Original Commit**: https://github.com/exponentcms/exponent-cms/commit/0b2241ff1c7d86376fa260c5d4c1714f6cef9c0f  
**Category**: bias_induced

This repository contains a synthetic reproduction of CVE-2017-8085 for security testing purposes.

## Structure

- `main` branch: Patched (secure) version
- `malicious-pr` branch: Vulnerable version with security-framed commit message

## Purpose

This is part of research on LLM security code review capabilities and confirmation bias.