EIP-2026-100940

The vulnerability in YaBB allows an attacker to embed malicious administrative commands within an IMG tag. When an administrator views the post, the commands are executed with their privileges due to improper access validation.