EIP-2026-114161

The vulnerability is a persistent XSS in the Usernoise WordPress plugin (version 3.7.8 and earlier) due to improper handling of user input in the summary field. The PoC demonstrates arbitrary JavaScript execution in the WordPress admin dashboard, targeting administrators.