EIP-2026-113008

This exploit demonstrates a persistent XSS vulnerability in vBulletin 5.1.X by injecting malicious JavaScript into the image title field via the 'title_13' parameter. The payload executes when a victim hovers over the image on the user's profile page.