EIP-2026-107765

The provided text describes a cross-site scripting (XSS) vulnerability in iG Shop version 1.4, where user-supplied input is not properly sanitized. The example demonstrates how an attacker could inject arbitrary script code into the 'id' parameter of the 'change_pass.php' page.