EIP-2026-112106

This exploit demonstrates a stored XSS vulnerability in Simple Machines Forum (SMF) due to improper filtering of BBCode URLs. It includes payloads to execute arbitrary JavaScript, steal cookies, and load external malicious scripts.