EIP-2026-110361

This exploit demonstrates multiple XSS vulnerabilities in osCommerce by injecting malicious JavaScript via URL parameters. The PoC shows how an attacker can steal cookie-based authentication credentials by exploiting unsanitized input in the application.