EIP-2026-112879

This exploit demonstrates a stored XSS vulnerability in Ultimate PHP Board (UPB) by injecting malicious JavaScript via an image tag. The script steals user cookies and sends them to an attacker-controlled endpoint.