EIP-2026-114204

This exploit demonstrates a persistent XSS vulnerability in the WordPress WP Advanced Comment plugin version 0.10. The vulnerability arises due to insufficient input sanitization in the 'comment[meta_value]' parameter, allowing an attacker to inject malicious JavaScript code that executes when viewed by an admin.