EIP-2026-114096

This exploit demonstrates SQL injection and stored XSS vulnerabilities in WordPress Plugin Supsystic Contact Form 1.7.5. The SQLi is exploitable via the 'sidx' GET parameter, while the XSS is triggered through the 'Edit name' and 'Contact information' features.