EIP-2026-109762

The exploit demonstrates a reflected XSS vulnerability in MyDLstore Pixel Ad Script by injecting a malicious script via the 'order_id' parameter in the payment.php page. The PoC uses a simple JavaScript alert to confirm the vulnerability by displaying the user's cookies.