EIP-2026-114226

This is a writeup describing a stored XSS vulnerability in the WordPress Plugin WP Prayer version 1.6.1 and earlier. The exploit involves injecting a malicious script into the 'prayer_messages' field, which executes when the prayer requests are viewed.