EIP-2026-111497

This exploit demonstrates a persistent XSS vulnerability in PrestaShop <= 1.5.1 by bypassing the isCleanHtml() function via Base64-encoded payloads in the contact form. The payloads execute when an admin views the message, potentially leading to malicious scenarios.