EIP-2026-100195

This exploit demonstrates a cross-site scripting (XSS) vulnerability in CartWIZ by injecting a malicious script into the 'idProduct' parameter. The script executes arbitrary JavaScript in the context of the user's browser, potentially stealing cookies or performing other malicious actions.