EIP-2026-113560

This exploit demonstrates a CSRF vulnerability in the WordPress ALO EasyMail Newsletter plugin (version 2.6.01) that allows script insertion via the 'listname_en' parameter. The PoC includes a crafted HTML form that submits malicious input to the vulnerable endpoint, triggering an XSS payload.