EIP-2026-107680

PRE-CVE

Humhub 0.10.0-rc.1 - Multiple Persistent Cross-Site Scripting Vulnerabilities

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-107680. PoCs published by Jos Wetzels_ Emiel Florijn.

AI-analyzed exploit summary This is a detailed technical writeup describing multiple persistent XSS vulnerabilities in Humhub <= 0.10.0-rc.1. It includes proof-of-concept payloads, affected code paths, and references to patched commits.

Description

Humhub 0.10.0-rc.1 - Multiple Persistent Cross-Site Scripting Vulnerabilities

Exploits (1)

exploitdb WRITEUP
by Jos Wetzels_ Emiel Florijn · textwebappsphp
https://www.exploit-db.com/exploits/35511

This is a detailed technical writeup describing multiple persistent XSS vulnerabilities in Humhub <= 0.10.0-rc.1. It includes proof-of-concept payloads, affected code paths, and references to patched commits.

Classification
Writeup 100%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: Humhub <= 0.10.0-rc.1
Auth required
Prerequisites: User-level access to the Humhub system
MITRE ATT&CK
mistral-large-3 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026