EIP-2026-113529

This is a proof-of-concept for a CSRF and stored XSS vulnerability in the Ad Inserter WordPress plugin. The exploit demonstrates how an attacker can trick an admin into executing arbitrary JavaScript via a crafted payload in the plugin's settings.