EIP-2026-114150

The provided text describes a cross-site scripting (XSS) vulnerability in the Uploader Plugin for WordPress, specifically in the 'notify.php' file, due to improper input sanitization. The vulnerability allows arbitrary script execution in the context of the affected site.