EIP-2026-113016

This exploit demonstrates a stored XSS vulnerability in the Advanced User Tagging vBulletin plugin. The attacker can inject malicious JavaScript via the 'Hash Tag Subscriptions' feature, which executes when other users access the affected page.