EIP-2026-113595

The provided text describes a cross-site scripting (XSS) vulnerability in the BezahlCode Generator Plugin for WordPress, specifically in the 'der_generator.php' file. The vulnerability arises due to insufficient input sanitization, allowing arbitrary script execution in the context of the affected site.