EIP-2026-100184

This exploit demonstrates a cross-site scripting (XSS) vulnerability in CartWIZ due to improper input sanitization. The PoC shows how an attacker can inject arbitrary JavaScript code via the 'idProduct' parameter in the 'addToWishlist.asp' endpoint.