EIP-2026-114088

This is a proof-of-concept for a stored XSS vulnerability in the WordPress Stripe Payments plugin (v2.0.39). The exploit demonstrates how an attacker can inject malicious JavaScript via the 'currency_code' parameter, which is then stored and executed in the context of an admin user's session.