EIP-2026-109461

The provided text describes a cross-site scripting (XSS) vulnerability in MidiCart PHP, where user-supplied input is not properly sanitized. The example demonstrates an XSS payload injected via the 'searchstring' parameter in a URL.