EIP-2026-114095

This exploit demonstrates a stored XSS vulnerability in the WordPress plugin 'Contact Form by Supsystic' version 1.7.18. The vulnerability allows an attacker to inject malicious JavaScript code into the 'label' field of a form, which executes when the form is viewed.