EIP-2026-105171
PRE-CVEAnchor CMS 0.12.7 - Persistent Cross-Site Scripting (Authenticated)
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-105171. PoCs published by Sinem Şahin.
AI-analyzed exploit summary This exploit demonstrates a persistent XSS vulnerability in Anchor CMS 0.12.7 by injecting a malicious script into the post description field, which executes when the post is viewed. The HTTP request shows the exact payload and parameters required to trigger the vulnerability.
Description
Anchor CMS 0.12.7 - Persistent Cross-Site Scripting (Authenticated)
Exploits (1)
This exploit demonstrates a persistent XSS vulnerability in Anchor CMS 0.12.7 by injecting a malicious script into the post description field, which executes when the post is viewed. The HTTP request shows the exact payload and parameters required to trigger the vulnerability.