EIP-2026-113836

This is a functional proof-of-concept for a persistent Cross-Site Scripting (XSS) vulnerability in the Instagram Feed WordPress plugin via CSRF. The exploit demonstrates how an attacker can inject malicious JavaScript into the plugin's settings, which executes when any user visits the Instagram Feed.