EIP-2026-114006

This is a writeup describing a stored XSS vulnerability in the Relevanssi WordPress plugin version 2.7.2. The vulnerability allows an attacker to inject malicious HTML code via the 'search Query' variable, which is displayed unsanitized in the 'User Searches' section of the admin dashboard.