EIP-2026-104292

This advisory describes a CSRF and XSS vulnerability in JForum 2.1.8's bookmarks feature. The exploit involves tricking an authenticated user into visiting a crafted URL, which inserts a malicious bookmark with an XSS payload that executes when the user views their bookmarks.