EIP-2026-113518
PRE-CVEWordPress Plugin 404 to 301 2.2.8 - Persistent Cross-Site Scripting
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-113518. PoCs published by Alyssa Milburn.
AI-analyzed exploit summary The advisory details a stored XSS vulnerability in the 404 to 301 WordPress Plugin, where user-controlled input (Referer and User-Agent headers) is not properly escaped in the admin logs. An attacker can inject malicious scripts, which execute when an admin views the logs.
Description
WordPress Plugin 404 to 301 2.2.8 - Persistent Cross-Site Scripting
Exploits (1)
The advisory details a stored XSS vulnerability in the 404 to 301 WordPress Plugin, where user-controlled input (Referer and User-Agent headers) is not properly escaped in the admin logs. An attacker can inject malicious scripts, which execute when an admin views the logs.