EIP-2026-114018

This is a writeup describing a stored XSS vulnerability in the WordPress plugin 'RSS for Yandex Turbo' version 1.29. The exploit involves injecting malicious JavaScript payloads into user input fields, which are then stored in the database and executed when triggered by mouse events.