EIP-2026-112977

The advisory describes a persistent XSS vulnerability in vBSEO versions 3.5.2 and 3.2.2, caused by insufficient sanitization of external website titles. The exploit involves crafting a malicious HTML page with an XSS payload in the title tag, which is then saved by vBSEO's LinkBack feature.