EIP-2026-113488

The exploit demonstrates a cross-site scripting (XSS) vulnerability in WordPress by injecting malicious input into the 'p' parameter of the post.php endpoint. This allows arbitrary script execution in the context of an unsuspecting user's browser.