EIP-2026-114219

This exploit demonstrates a stored XSS vulnerability in WordPress Plugin WP Learn Manager 1.1.2 due to improper sanitization of User Field Titles. The PoC includes a crafted HTTP POST request that injects a malicious script, which is triggered when an admin visits a specific page.