EIP-2026-102487

The code describes an HTML injection vulnerability in JForum 2.1.8, where user-supplied input is not properly sanitized, allowing attacker-supplied HTML and script code to execute in the context of the affected browser. The exploit involves crafting a malicious URL with XSS payloads in the 'description' and 'title' parameters.