EIP-2026-110608

The exploit demonstrates a stored XSS vulnerability in Phorum 5.2.11 and prior via insufficient BBcode filtering. It leverages CSS expression injection in [color] and [size] tags to execute arbitrary JavaScript, with specific payloads for IE6, IE7, Firefox, and IE8.