EIP-2026-110554

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Pet Listing by injecting arbitrary script code via the 'bedrooms_from' parameter in the search functionality. The lack of input sanitization allows attackers to execute malicious scripts in the context of the affected site.