EIP-2026-108089

This is a writeup describing a cross-site scripting (XSS) vulnerability in JForum 2.1.8. The vulnerability arises from improper sanitization of user-supplied input in the 'username' parameter, allowing arbitrary script execution in the context of the affected site.