Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-105176. PoCs published by pratul agrawal.
AI-analyzed exploit summary This exploit demonstrates a persistent XSS vulnerability in ANE CMS 1 by injecting malicious JavaScript into the 'name' and 'link' fields of the 'Add Links' functionality. The payload is stored in the database and executed when the page is accessed.
Description
Ane CMS 1 - Persistent Cross-Site Scripting
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by pratul agrawal · textwebappsphp
https://www.exploit-db.com/exploits/11687
This exploit demonstrates a persistent XSS vulnerability in ANE CMS 1 by injecting malicious JavaScript into the 'name' and 'link' fields of the 'Add Links' functionality. The payload is stored in the database and executed when the page is accessed.
Classification
Working Poc 95%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target:
ANE CMS 1
Auth required
Prerequisites:
Access to the admin panel · Valid session cookie
MITRE ATT&CK
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026