EIP-2026-114395

The exploit demonstrates multiple reflected XSS vulnerabilities in WWWThreads by injecting arbitrary script code via the 'Cat' parameter in various PHP scripts. The lack of input sanitization allows attackers to execute malicious scripts in the context of the affected site.