EIP-2026-114489

This is a functional proof-of-concept for a stored XSS vulnerability in xt:Commerce VEYTON 4.0.15. It demonstrates how an attacker can inject malicious JavaScript via the 'products_name_de' parameter, which is then stored and executed in the context of a user's browser session.