EIP-2026-113430

This exploit demonstrates a stored XSS vulnerability in Wikidforum 2.20 via the 'reply_text' parameter in a POST request. The payload injects malicious JavaScript through an 'onerror' event in an img tag, which executes when the comment is rendered.