EIP-2026-105156

The exploit demonstrates a reflected XSS vulnerability in AmazCart CMS 3.4 by injecting a malicious script payload into the search bar, which executes when the search results are viewed. The PoC includes clear steps to reproduce the issue and confirms the vulnerability with a simple alert payload.