EIP-2026-113654

This exploit demonstrates an arbitrary file upload vulnerability in WordPress Contus Video Gallery by leveraging insufficient input sanitization. It uses cURL to upload a malicious file disguised as an image, potentially leading to remote code execution.