EIP-2026-112565

The exploit demonstrates a persistent XSS vulnerability in Taxi Booking Script v1.0 by injecting malicious JavaScript into the 'name', 'uuid', and 'pickup_address' parameters. The PoC includes crafted HTTP POST requests that trigger the XSS payload, redirecting users to an external site.