EIP-2026-108787

PRE-CVE

Joomla! Component Minify4Joomla! - Arbitrary File Upload / Persistent Cross-Site Scripting

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-108787. PoCs published by Sid3^effects.

AI-analyzed exploit summary This is a technical writeup describing an upload and persistent XSS vulnerability in Minify4Joomla. It provides attack patterns, demo URLs, and steps to exploit the vulnerability, but does not include functional exploit code.

Description

Joomla! Component Minify4Joomla! - Arbitrary File Upload / Persistent Cross-Site Scripting

Exploits (1)

exploitdb WRITEUP
by Sid3^effects · textwebappsphp
https://www.exploit-db.com/exploits/14293

This is a technical writeup describing an upload and persistent XSS vulnerability in Minify4Joomla. It provides attack patterns, demo URLs, and steps to exploit the vulnerability, but does not include functional exploit code.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: Minify4Joomla
Auth required
Prerequisites: User registration · Access to article submission form
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026