EIP-2026-104460
PRE-CVET-Soft E-Commerce 4 - 'UrunAdi' Stored Cross-Site Scripting (XSS)
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-104460. PoCs published by Alperen Ergel.
AI-analyzed exploit summary This is a functional proof-of-concept for a stored XSS vulnerability in T-Soft E-Commerce 4. The exploit demonstrates how an attacker can inject malicious JavaScript payloads into the 'UrunAdi' (Product Name) field, which is then stored and executed when accessed by other users.
Description
T-Soft E-Commerce 4 - 'UrunAdi' Stored Cross-Site Scripting (XSS)
Exploits (1)
This is a functional proof-of-concept for a stored XSS vulnerability in T-Soft E-Commerce 4. The exploit demonstrates how an attacker can inject malicious JavaScript payloads into the 'UrunAdi' (Product Name) field, which is then stored and executed when accessed by other users.