EIP-2026-112999

The exploit demonstrates a cross-site scripting (XSS) vulnerability in vBulletin 4.0.2 by injecting malicious script tags into the 'query' parameter of the search.php endpoint. The payload executes arbitrary JavaScript in the context of the affected site, potentially stealing cookies or performing other malicious actions.