EIP-2026-113948

This is a technical writeup detailing an HTML injection vulnerability in the WordPress Payments Plugin | GetPaid version 2.4.6. The vulnerability allows an attacker to inject HTML code into the 'Help Text' field, which is then stored and executed in the database, leading to potential XSS attacks.