Exploitation Summary
EIP tracks 1 public exploit for CVE-2026-28426. PoCs published by LTX-GOD.
AI-analyzed exploit summary This repository provides a detailed technical analysis of a stored XSS vulnerability in Statamic CMS, including specific code paths, file references, and step-by-step reproduction instructions. It does not contain functional exploit code but offers in-depth research on the vulnerability's root cause and exploitation method.
Description
Statmatic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.11 and 6.4.0, stored XSS vulnerability in svg and icon related components allow authenticated users with appropriate permissions to inject malicious JavaScript that executes when viewed by higher-privileged users. This has been fixed in 5.73.11 and 6.4.0.
Exploits (1)
This repository provides a detailed technical analysis of a stored XSS vulnerability in Statamic CMS, including specific code paths, file references, and step-by-step reproduction instructions. It does not contain functional exploit code but offers in-depth research on the vulnerability's root cause and exploitation method.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N