EIP-2026-109790

This exploit demonstrates multiple reflected XSS vulnerabilities in MySmartBB 1.7.0 by injecting arbitrary JavaScript via unsanitized user input in various PHP endpoints. The PoC uses script tags to trigger alert dialogs, confirming the vulnerability.