EIP-2026-110377

This exploit demonstrates a persistent XSS vulnerability in osCommerce 2.3.4.1 via the 'title' parameter in the admin newsletter module. The payload is injected into the title field and executed when the newsletter is viewed.