EIP-2026-113757

The exploit describes a cross-site scripting (XSS) vulnerability in the flash-album-gallery WordPress plugin due to insufficient sanitization of user-supplied input in the 'i' parameter of the 'facebook.php' file. An attacker can inject arbitrary script code to execute in the context of the affected site.