EIP-2026-100316

This exploit demonstrates a cross-site scripting (XSS) vulnerability in eWay by injecting a script tag via the search query parameter. The PoC shows how arbitrary JavaScript can be executed in the context of the affected site.