EIP-2026-114258

The provided text describes a cross-site scripting (XSS) vulnerability in the WP-PHPList plugin for WordPress, where user-supplied input is not properly sanitized. An example URL is given to demonstrate the exploit, which executes arbitrary JavaScript in the context of the affected site.