EIP-2026-110364

The exploit demonstrates a cross-site scripting (XSS) vulnerability in the 'default.php' script due to improper sanitization of the 'manufacturers_id' parameter. The provided URL injects an iframe, which would execute in the context of the vulnerable site.