EIP-2026-111147

This exploit demonstrates a cross-site scripting (XSS) and authentication bypass vulnerability in PHPMyCart 1.3. The PoC includes a crafted URL that injects arbitrary JavaScript code and bypasses authentication to access admin pages.