EIP-2026-107585
PRE-CVEHero Framework - users/login 'Username' Cross-Site Scripting
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-107585. PoCs published by Stefan Schurtz.
AI-analyzed exploit summary The exploit demonstrates a reflected XSS vulnerability in Hero OS by injecting malicious JavaScript via the 'username' parameter in the login page. The payload executes arbitrary script code in the context of the affected site when a user interacts with the crafted URL.
Description
Hero Framework - users/login 'Username' Cross-Site Scripting
Exploits (1)
The exploit demonstrates a reflected XSS vulnerability in Hero OS by injecting malicious JavaScript via the 'username' parameter in the login page. The payload executes arbitrary script code in the context of the affected site when a user interacts with the crafted URL.