EIP-2026-100186

This exploit demonstrates a cross-site scripting (XSS) vulnerability in CartWIZ due to improper input sanitization. The PoC injects a script tag into the 'message' parameter to execute arbitrary JavaScript in the context of the user's browser.