EIP-2026-114225

The provided text describes a cross-site scripting (XSS) vulnerability in the WP Photo Album plugin for WordPress, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker could inject arbitrary script code to steal cookie-based authentication credentials.