EIP-2026-110992

The exploit demonstrates a cross-site scripting (XSS) vulnerability in phpBB2 Plus by injecting malicious script code via the 'sid' parameter in the URL. The payload executes arbitrary JavaScript in the context of the victim's browser.