EIP-2026-106761

This exploit demonstrates a Cross-Site Scripting (XSS) vulnerability in Ecommerse v1.0, where the eMail request parameter is reflected in an HTML tag attribute without proper sanitization. The provided HTTP POST request shows how an attacker can inject malicious content into the error parameter.