EIP-2026-109246

This exploit demonstrates a cross-site scripting (XSS) vulnerability in MagicScripts E-Store Kit-2 PayPal Edition. The vulnerability allows arbitrary script execution via the 'txn_id' parameter in the downloadform.php file.