EIP-2026-107140

This is a writeup describing a stored XSS vulnerability in FlatPress 0.909.1. The vulnerability exists in the `plugin.lastcomments.php` file where user-supplied comment content is not properly sanitized before being displayed.