EIP-2026-106963
PRE-CVEExponent CMS 0.95 - Multiple Cross-Site Scripting Vulnerabilities
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-106963. PoCs published by y3dips.
AI-analyzed exploit summary The provided text describes multiple XSS vulnerabilities in Exponent CMS 0.95, with example URLs demonstrating how arbitrary script code can be executed. No actual exploit code is present, only a vulnerability description and proof-of-concept URLs.
Description
Exponent CMS 0.95 - Multiple Cross-Site Scripting Vulnerabilities
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by y3dips · textwebappsphp
https://www.exploit-db.com/exploits/25058
The provided text describes multiple XSS vulnerabilities in Exponent CMS 0.95, with example URLs demonstrating how arbitrary script code can be executed. No actual exploit code is present, only a vulnerability description and proof-of-concept URLs.
Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target:
Exponent CMS 0.95
No auth needed
Prerequisites:
Access to the target application's URL
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026