EIP-2026-113243

The exploit demonstrates a cross-site scripting (XSS) vulnerability in WebAsyst Shop-Script by injecting malicious script code into the 'login' and 'first_name' parameters. The PoC includes a crafted URL that, when accessed, executes arbitrary JavaScript in the context of the victim's browser.