EIP-2026-106253

This exploit demonstrates a persistent XSS vulnerability in CSE Bookstore 1.0, where an attacker can inject malicious JavaScript payloads into the 'quantity' field, which executes when the victim accesses the cart or checkout pages.