EIP-2026-113820

The provided text describes a cross-site scripting (XSS) vulnerability in the IGIT Posts Slider Widget plugin for WordPress, specifically in the 'timthumb.php' file. The vulnerability arises due to insufficient input sanitization, allowing arbitrary script execution in the context of the affected site.