EIP-2026-106768

This exploit demonstrates a cross-site scripting (XSS) vulnerability in ECW Shop due to insufficient input sanitization. The PoC injects a JavaScript alert via the 'max' parameter in a URL, which executes arbitrary script code in the context of the victim's browser.