EIP-2026-112958

This is a writeup describing a stored XSS vulnerability in the Vanilla Tagging Enhanced plugin 1.0.1. The exploit involves creating a thread with a malicious tag containing JavaScript code, which executes when an administrator or moderator edits the discussion.