EIP-2026-109732

The exploit demonstrates SQL Injection and Stored XSS vulnerabilities in the MyBB Profile Blogs plugin. The SQLi occurs due to unsanitized input in the 'edit' parameter, while the XSS arises from improper handling of the 'subject' field in blog posts.