EIP-2026-113544

This exploit demonstrates a stored XSS vulnerability in the WordPress plugin Advanced Custom Fields (ACF) version 5.7.7. The PoC injects malicious JavaScript into the 'acf_fields[11][label]' parameter, which is then stored and executed when the field is rendered.