EIP-2026-114360

This is a technical writeup describing a reflected XSS vulnerability in the WordPress White-Label Framework. The vulnerability exists in the form-sharebymail_iframe.php file, where user input is not properly sanitized, allowing arbitrary JavaScript execution.