EIP-2026-112889

The exploit demonstrates a persistent XSS vulnerability in Ultra Light Forum by injecting a malicious script into the profile settings. When another user views the profile, the script executes, potentially stealing cookies or session data.