EIP-2026-113844

The exploit demonstrates a reflected XSS vulnerability in WordPress Plugin Jetpack 9.1 via the 'post_id' parameter in 'grunion-form-view.php'. The PoC shows how arbitrary JavaScript can be executed in the context of the victim's browser.