EIP-2026-113837

The exploit demonstrates a reflected XSS vulnerability in the WordPress plugin 'International Sms For Contact Form 7 Integration' version 1.2. The PoC shows how an attacker can inject malicious JavaScript via the 'page' parameter in the plugin's admin class file.