EIP-2026-110598

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Phorum's 'header.php' and 'footer.php' components due to unsanitized output of the 'GLOBALS' parameter. Attackers can inject malicious scripts to execute in the context of the victim's browser.