EIP-2026-114269

This exploit demonstrates a CSRF vulnerability in WP-TopBar 4.02, which allows an attacker to submit a malicious POST request to update the TopBar settings with a Stored XSS payload. The PoC includes an HTML form that automatically submits the payload to a vulnerable WordPress instance.