EIP-2026-110897

The vulnerability in Splatt Forum 4.0 allows remote code execution via XSS due to insufficient sanitization of HTML tags in user-submitted posts. An attacker can inject malicious scripts to steal cookies or perform other client-side attacks.