Welcome to VulnShop

Reflected DOM XSS: Search parameter/input is directly injected into the DOM using innerHTML without sanitization or HTML entity encoding.
Client-Side Catalog: Catalog state and prices are stored in client-side storage, allowing client tampering.

The ultimate cutting-edge tech store — fully functional, modern, and completely unhardened for cybersecurity students & penetration testing practice.