EIP-2026-113633

This PHP script exploits an arbitrary file upload vulnerability in the cnhk-slideshow WordPress plugin by sending a crafted POST request to upload a file named 'file.php'. The lack of input sanitization allows for potential remote code execution.