EIP-2026-114164

This exploit demonstrates a Persistent XSS vulnerability in the WordPress Users Ultra Plugin (v1.5.50). It allows a registered user to inject malicious JavaScript code into subscription package details, which executes when an admin or other users view the package information.