EIP-2026-104182

This exploit demonstrates a Client-Side Template Injection vulnerability in Bagisto 1.3.3. By injecting a malicious payload into user profile fields, arbitrary JavaScript code is executed when an admin or another user views the profile or order.