EIP-2026-106960
PRE-CVEExpense Tracker 1.0 - 'Expense Name' Stored Cross-Site Scripting
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-106960. PoCs published by Shivam Verma.
AI-analyzed exploit summary This exploit demonstrates a stored XSS vulnerability in Expense Tracker 1.0, where an attacker can inject malicious JavaScript payloads into the 'Expense Name' field. The payload executes when an admin or user accesses the compromised section, potentially leading to cookie theft.
Description
Expense Tracker 1.0 - 'Expense Name' Stored Cross-Site Scripting
Exploits (1)
This exploit demonstrates a stored XSS vulnerability in Expense Tracker 1.0, where an attacker can inject malicious JavaScript payloads into the 'Expense Name' field. The payload executes when an admin or user accesses the compromised section, potentially leading to cookie theft.