EIP-2026-109736

The exploit demonstrates XSS and CSRF vulnerabilities in MyBB Timeline Plugin 1.0. It provides functional payloads for XSS via thread/post, location/bio, and a CSRF form to change the timeline banner.