EIP-2026-100187

This exploit demonstrates a cross-site scripting (XSS) vulnerability in CartWIZ by injecting a malicious script via the 'redirect' parameter in the login page URL. The script executes arbitrary JavaScript in the context of the user's browser, potentially stealing cookies or performing other malicious actions.