EIP-2026-113661

This is a technical writeup describing a stored XSS vulnerability in the WordPress Count per Day plugin version 3.2.3. The vulnerability allows unauthenticated attackers to inject HTML/JavaScript via the notes.php file, which is accessible without admin restrictions.