EIP-2026-109858

This exploit demonstrates a stored XSS vulnerability in the WordPress Neon Text plugin (version 1.1 and below) via the 'neontext_box' shortcode. The PoC shows how an attacker can inject malicious JavaScript into a post, which executes when previewed.