EIP-2026-113556

The exploit demonstrates a persistent XSS vulnerability in the All In One WordPress Security plugin v3.8.3, where malicious script codes can be injected via the 404 detection redirect URL and file name error logs URL input fields. The PoC shows how an attacker can inject script codes that persist and execute in the application context.