EIP-2026-110270

This exploit demonstrates a stored XSS vulnerability in OpenCart 3.0.3.6 via the 'subject' field in the admin mail functionality. The payload is injected into the subject field and triggers when a user opens the mail.