EIP-2026-114363

This exploit demonstrates a persistent XSS vulnerability in WordPress Theme Zoner Real Estate 4.1.1, where an attacker can inject malicious scripts via the 'Address' field in the property creation form. It also includes an IDOR vulnerability allowing unauthorized deletion of any post or page.