EIP-2026-114247

This exploit demonstrates a stored XSS vulnerability in the WordPress Plugin WP Video Playlist 1.1.1. The payload is injected into the 'videoFields[post_type]' parameter via a POST request to /wp-admin/options.php, triggering arbitrary JavaScript execution in the context of an authenticated user.