EIP-2026-105712

This is a proof-of-concept for a stored cross-site scripting (XSS) vulnerability in Car Portal v2.0. The exploit demonstrates how an attacker can inject arbitrary JavaScript code via the 'car_make' parameter, which is then executed in the context of the affected site.