EIP-2026-110502

This exploit demonstrates multiple non-persistent XSS vulnerabilities in Payment Terminal versions 2.4.1, 2.2.1, and 3.1. The PoC shows how malicious script code can be injected into parameters like `item_description`, `fname`, `lname`, `address`, `city`, and `email` via POST requests, leading to client-side script execution.