EIP-2026-104975

The exploit demonstrates a persistent XSS vulnerability in Advanced Electron Forum v1.0.9 by injecting malicious JavaScript into the 'fredirect' parameter, which is stored in the database and executed when victims visit specific URLs.