EIP-2026-113655

This exploit demonstrates a stored XSS vulnerability in the WordPress Plugin Cookie Law Bar 1.2.1. An authenticated attacker can inject malicious JavaScript into the 'Bar Message' field, which executes when users browse WordPress pages, potentially stealing cookies or sensitive data.