EIP-2026-112962

The exploit describes two vulnerabilities in Vanilla Forums: an insecure permissions issue allowing unauthorized access to drafts via URL manipulation, and a stored XSS vulnerability in the flagging function that triggers on the admin dashboard.