EIP-2026-100193

The provided text describes an SQL injection vulnerability in CartWIZ, where the 'priceTo' parameter in a search query is not properly sanitized. This allows attackers to inject malicious SQL queries, potentially leading to data compromise or further exploitation of the database.