EIP-2026-113627

The exploit describes a cross-site scripting (XSS) vulnerability in the church_admin WordPress plugin (version 0.33.4.5) due to improper input sanitization. The provided URL demonstrates the vulnerability by injecting a script tag into the 'id' parameter.