EIP-2026-110962

This exploit demonstrates an HTML injection vulnerability in phpBB's BBCode parsing, allowing arbitrary JavaScript execution via malformed URL tags. The PoC shows how an attacker can inject malicious scripts into posts or messages due to insufficient sanitization.