EIP-2026-113658

This is a writeup describing a stored XSS vulnerability in the WordPress Corner-Ad plugin version 1.0.7. The exploit involves injecting malicious JavaScript into the 'Ad name' field, which is not properly escaped, leading to execution when the page is viewed.