EIP-2026-114182

This exploit demonstrates a stored XSS vulnerability in the WordPress Wappointment plugin version 2.2.4. The PoC shows how an attacker can inject malicious JavaScript into the 'name' parameter, which is then executed when an admin views the calendar page.