EIP-2026-110494

This is a working proof-of-concept for a non-persistent cross-site scripting (XSS) vulnerability in PaulPrinting CMS (v2018). The exploit demonstrates how an attacker can inject malicious script code via the 'q' parameter in the delivery module, leading to session hijacking or phishing attacks.