EIP-2026-105409

PRE-CVE

Basit 1.0 Search Module - Cross-Site Scripting

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-105409. PoCs published by Ertan Kurt.

AI-analyzed exploit summary This exploit demonstrates a cross-site scripting (XSS) vulnerability in Basit's Search module due to insufficient input sanitization. The crafted URL injects malicious JavaScript via the 'q' parameter, allowing execution of arbitrary code in the context of the victim's browser.

Description

Basit 1.0 Search Module - Cross-Site Scripting

Exploits (1)

exploitdb WORKING POC VERIFIED
by Ertan Kurt · textwebappsphp
https://www.exploit-db.com/exploits/22385

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Basit's Search module due to insufficient input sanitization. The crafted URL injects malicious JavaScript via the 'q' parameter, allowing execution of arbitrary code in the context of the victim's browser.

Classification
Working Poc 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: Basit (version unspecified)
No auth needed
Prerequisites: Victim must visit the crafted URL
MITRE ATT&CK
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026