EIP-2026-111561

This exploit demonstrates an HTML injection vulnerability in PScript PForum, allowing an attacker to inject malicious JavaScript via the user profile form. The PoC steals cookie-based authentication credentials by redirecting them to an attacker-controlled domain.