EIP-2026-106253
PRE-CVECSE Bookstore 1.0 - 'quantity' Persistent Cross-site Scripting
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-106253. PoCs published by Vyshnav nk.
AI-analyzed exploit summary This exploit demonstrates a persistent XSS vulnerability in CSE Bookstore 1.0, where an attacker can inject malicious JavaScript payloads into the 'quantity' field, which executes when the victim accesses the cart or checkout pages.
Description
CSE Bookstore 1.0 - 'quantity' Persistent Cross-site Scripting
Exploits (1)
exploitdb
WORKING POC
by Vyshnav nk · textwebappsphp
https://www.exploit-db.com/exploits/48973
This exploit demonstrates a persistent XSS vulnerability in CSE Bookstore 1.0, where an attacker can inject malicious JavaScript payloads into the 'quantity' field, which executes when the victim accesses the cart or checkout pages.
Classification
Working Poc 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target:
CSE Bookstore 1.0
Auth required
Prerequisites:
Access to the 'quantity' input field in the application · Victim interaction with the cart or checkout pages
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026