EIP-2026-113973

This exploit demonstrates a stored XSS vulnerability in WordPress Popup Builder 3.49 by injecting a malicious script into the popup title, which executes when the popup is selected in the 'Add Post' or 'Add Page' sections.