EIP-2026-113814

This exploit demonstrates a CSRF and persistent XSS vulnerability in WordPress plugin 'huge-it-slider' version 2.7.5. It injects malicious JavaScript/HTML into vulnerable POST parameters, which are then stored and executed when the slider is rendered.