EIP-2026-111524

The exploit demonstrates a cross-site scripting (XSS) vulnerability in PayProCart by injecting a malicious script via the 'username' parameter in the URL. The script executes arbitrary JavaScript in the context of the user's browser, potentially stealing cookies or performing other malicious actions.