EIP-2026-113023

The provided text describes a cross-site scripting (XSS) vulnerability in the Two-Step External Link module for vBulletin, where user-supplied input via the 'url' parameter in 'externalredirect.php' is not properly sanitized. This allows arbitrary script execution in the context of the affected site.