EIP-2026-109713

This exploit demonstrates a stored XSS vulnerability in the Extended Useradmininfo MyBB Plugin 1.2.1. By modifying the user-agent to include malicious JavaScript, an attacker can execute arbitrary script code when an administrator views their profile.