EIP-2026-113244

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Shop-Script PREMIUM by injecting arbitrary JavaScript code via the 'searchstring' parameter. The payload bypasses basic sanitization using obfuscation techniques like HTML encoding and mixed case.