EIP-2026-113650

This exploit demonstrates a stored XSS vulnerability in the WordPress plugin Contact Form to Email version 1.3.24. The PoC involves creating a form with a malicious script tag, which triggers when accessed by an authenticated user.