EIP-2026-113993

This is a writeup describing a persistent Cross-Site Scripting (XSS) vulnerability in the Quick Paypal Payments WordPress plugin version 3.0. The vulnerability arises from insufficient input validation and output sanitization of the 'reference' and 'amount' parameters.