EIP-2026-114122

The provided text describes a cross-site scripting (XSS) vulnerability in the Track That Stat WordPress plugin, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker could inject malicious JavaScript code to steal cookies or perform other attacks.