EIP-2026-107586
PRE-CVEHESK 2.2 - Multiple Cross-Site Scripting Vulnerabilities
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-107586. PoCs published by High-Tech Bridge SA.
AI-analyzed exploit summary This exploit demonstrates multiple reflected XSS vulnerabilities in HESK 2.2 by injecting malicious JavaScript via unsanitized user-supplied input in various parameters across multiple endpoints. The PoC uses URL-encoded script tags to execute arbitrary JavaScript in the context of the affected site.
Description
HESK 2.2 - Multiple Cross-Site Scripting Vulnerabilities
Exploits (1)
This exploit demonstrates multiple reflected XSS vulnerabilities in HESK 2.2 by injecting malicious JavaScript via unsanitized user-supplied input in various parameters across multiple endpoints. The PoC uses URL-encoded script tags to execute arbitrary JavaScript in the context of the affected site.