EIP-2026-110950

This exploit demonstrates a Cross-Site Scripting (XSS) vulnerability in PhpBB 2.0.16 by injecting malicious JavaScript into a forum post. The script exfiltrates user cookies to a remote server via an image tag with an expression-based payload.