EIP-2026-114026

The exploit demonstrates a reflected XSS vulnerability in the Securimage-WP WordPress plugin by injecting a malicious script via the URL path. The payload executes arbitrary JavaScript in the context of the affected site, potentially stealing cookies or performing other client-side attacks.