EIP-2026-112625

The provided text describes a cross-site scripting (XSS) vulnerability in tForum, where user-supplied input is not properly sanitized. The example demonstrates how an attacker could inject arbitrary JavaScript code via the 'username' parameter in the URL.