EIP-2026-113011

This exploit demonstrates a Cross-Site Scripting (XSS) vulnerability in vBulletin 5.6.3 by injecting malicious JavaScript into the 'group' parameter of the template.php file in the Admin Control Panel. The PoC provides a step-by-step guide to trigger the XSS payload, which executes arbitrary JavaScript code in the context of the victim's browser session.