EIP-2026-114232

This exploit demonstrates a persistent XSS vulnerability in the WordPress Plugin WP Sitemap Page 1.6.2. The PoC shows how an attacker can inject malicious JavaScript into the 'Exclude pages' field, which is then stored and executed when the page is accessed.