EIP-2026-112885

This is a proof-of-concept for a persistent XSS vulnerability in Ultimate POS 4.4, where the 'name' parameter in the product module is vulnerable to script injection. The exploit demonstrates how an attacker with vendor privileges can inject malicious JavaScript payloads via POST requests.