EIP-2026-112960

The exploit demonstrates a cross-site scripting (XSS) vulnerability in Vanilla Forums by injecting arbitrary script code via the 'p' parameter in the URL. The lack of input sanitization allows attackers to execute malicious scripts in the context of the affected site.