EIP-2026-107916

This exploit demonstrates an active XSS vulnerability in IP.Board 3.0.0 Beta 5 via crafted BBCode in message bodies or signatures, and a path disclosure vulnerability via an AJAX endpoint. The XSS payload bypasses expression filtering using obfuscation techniques.