Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-106139. PoCs published by High-Tech Bridge SA.
AI-analyzed exploit summary The exploit demonstrates a stored XSS vulnerability in Contenido CMS 4.8.12 via unsanitized input in the contact form and 'idart' parameter. It includes PoC code to execute arbitrary JavaScript, potentially leading to cookie theft or data modification.
Description
Contenido CMS 4.8.12 - Cross-Site Scripting
Exploits (1)
exploitdb
WORKING POC
by High-Tech Bridge SA · textwebappsphp
https://www.exploit-db.com/exploits/15659
The exploit demonstrates a stored XSS vulnerability in Contenido CMS 4.8.12 via unsanitized input in the contact form and 'idart' parameter. It includes PoC code to execute arbitrary JavaScript, potentially leading to cookie theft or data modification.
Classification
Working Poc 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target:
Contenido CMS 4.8.12 and prior
No auth needed
Prerequisites:
Access to the vulnerable contact form or front_content.php script
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026