EIP-2026-114183

This is a proof-of-concept for a stored XSS vulnerability in the WassUp Real Time Analytics WordPress Plugin. The exploit demonstrates how an unauthenticated attacker can inject malicious JavaScript code into the admin dashboard by visiting a malformed link, which executes when an admin views the 'Current Visitors' section.