EIP-2026-113501

This is a functional proof-of-concept for a stored XSS vulnerability in WordPress 3.0.3, leveraging CSS expression injection to execute arbitrary JavaScript in IE6/7 and Netscape 8.1. The exploit demonstrates how an attacker can inject malicious content into a post, which is then rendered in vulnerable browsers.