EIP-2026-106327

The provided text describes a cross-site scripting (XSS) vulnerability in D-Forum 1.11 due to insufficient input sanitization in the 'page' parameter of 'nav.php3'. The vulnerability allows remote attackers to execute arbitrary script code in the context of a user's browser session.