EIP-2026-112959

The exploit demonstrates a reflected XSS vulnerability in Vanilla Forums by injecting a malicious URL parameter (`Target=javascript:alert(document.cookie)`) that executes arbitrary JavaScript in the context of the affected site. This can lead to session hijacking or other client-side attacks.