EIP-2026-104496

This exploit demonstrates a stored XSS vulnerability in WordPress Plugin Colorbox Lightbox v1.1.1 due to improper input sanitization in the 'hyperlink' field of the plugin shortcode. The PoC provides example payloads that execute arbitrary JavaScript when injected into a post.