EIP-2026-112992

This exploit demonstrates a cross-site scripting (XSS) vulnerability in vBulletin's Moderation Control Panel (MCP) by injecting malicious JavaScript via the 'redirect' parameter. The PoC uses a data URI to execute arbitrary script code in the context of the affected site.