EIP-2026-114260

This exploit demonstrates a stored Cross-Site Scripting (XSS) vulnerability in the WordPress WP-PostRatings plugin version 1.86. The PoC shows how an attacker can inject malicious JavaScript via the 'postratings_image' parameter, which is then stored and executed in the context of a user's browser.