EIP-2026-110896

The vulnerability in Splatt Forum 4.0 allows remote attackers to inject malicious script code via the 'Search' function due to insufficient filtering of user-supplied URI parameters. This results in a stored XSS vulnerability where the script executes in the browser of a legitimate user.