Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-102367. PoCs published by MustLive.
AI-analyzed exploit summary This exploit demonstrates a cross-site scripting (XSS) vulnerability in EJBCA by injecting a malicious script into the 'issuer' parameter of a URL. The script executes arbitrary JavaScript in the context of the affected site, potentially stealing cookies or performing other malicious actions.
Description
EJBCA 4.0.7 - 'issuer' Cross-Site Scripting
Exploits (1)
This exploit demonstrates a cross-site scripting (XSS) vulnerability in EJBCA by injecting a malicious script into the 'issuer' parameter of a URL. The script executes arbitrary JavaScript in the context of the affected site, potentially stealing cookies or performing other malicious actions.