EIP-2026-106381

This exploit demonstrates an HTML injection vulnerability in DCForum+ by embedding a script tag in the subject field of a post. The lack of input sanitization allows arbitrary HTML and script code to be executed in the context of the victim's browser.