EIP-2026-114028

This exploit demonstrates a stored Cross-Site Scripting (XSS) vulnerability in the WordPress Sell Downloads plugin version 1.0.86. The PoC involves injecting malicious JavaScript via the 'Add Comment' feature, which executes when the product page is viewed.