EIP-2026-109687

This exploit demonstrates a cross-site scripting (XSS) vulnerability in MyBB 1.6 by injecting a malicious script via the 'tag' parameter in tags.php. The script executes an alert dialog, proving arbitrary JavaScript execution in the context of the affected site.