EIP-2026-106272

The exploit demonstrates multiple XSS vulnerabilities in CubeCart by injecting malicious scripts into the 'file', 'x', 'y', and 'email' parameters. These vulnerabilities arise due to insufficient input sanitization, allowing arbitrary JavaScript execution in the context of the victim's browser.