EIP-2026-103941

PRE-CVE

IBM Websphere Portal 6.0.1.5 Build wp6015 - Portlet Palette Search HTML Injection

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-103941. PoCs published by Sjoerd Resink.

AI-analyzed exploit summary The provided code demonstrates an HTML injection vulnerability in IBM WebSphere Portal, allowing an authenticated attacker to execute arbitrary script code in the context of the affected site. The payload uses an onmousemove event to trigger an XSS alert.

Description

IBM Websphere Portal 6.0.1.5 Build wp6015 - Portlet Palette Search HTML Injection

Exploits (1)

exploitdb WORKING POC VERIFIED
by Sjoerd Resink · textremotemultiple
https://www.exploit-db.com/exploits/33663

The provided code demonstrates an HTML injection vulnerability in IBM WebSphere Portal, allowing an authenticated attacker to execute arbitrary script code in the context of the affected site. The payload uses an onmousemove event to trigger an XSS alert.

Classification
Working Poc 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: IBM WebSphere Portal 6.0.1.5 Build Level wp6015_008_01
Auth required
Prerequisites: Authenticated access to IBM WebSphere Portal
MITRE ATT&CK
mistral-large-3 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026