EIP-2026-113882

This is a functional CSRF exploit for WordPress Mathjax Latex plugin 1.1, allowing an attacker to inject arbitrary JavaScript via a crafted form submission. The PoC demonstrates the vulnerability by submitting a hidden form with malicious payloads to the plugin's options page.