EIP-2026-113462

This PHP script exploits a stored XSS vulnerability in Woltlab Burning Board by sending a crafted registration request with malicious JavaScript payloads in the 'r_dateformat' parameter. The payload executes arbitrary script code in the context of a user's browser when the profile is viewed.