EIP-2026-114067

The exploit demonstrates multiple reflected XSS vulnerabilities in the Slideshow plugin for WordPress by injecting malicious scripts via unsanitized input parameters in various endpoints. The PoC includes crafted URLs that trigger arbitrary JavaScript execution in the context of the affected site.