EIP-2026-112431

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Stiva SHOPPING CART 1.0 by injecting a script tag via the 'cat' parameter in the URL. The PoC shows how arbitrary JavaScript can be executed in the context of the affected site.