EIP-2026-105788

The provided text describes a cross-site scripting (XSS) vulnerability in Cetera eCommerce version 14.0, where user-supplied input is not properly sanitized. The example demonstrates how an attacker could inject arbitrary script code via the 'bannerId' parameter in the URL.