EIP-2026-109054
PRE-CVEKusaba X 0.9 - Multiple Cross-Site Scripting Vulnerabilities
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-109054. PoCs published by Emilio Pinna.
AI-analyzed exploit summary The exploit demonstrates a reflected XSS vulnerability in Kusaba X by injecting a malicious script via the 'id' parameter in the 'animation.php' endpoint. The payload executes arbitrary JavaScript in the context of the affected site, potentially leading to session hijacking or other client-side attacks.
Description
Kusaba X 0.9 - Multiple Cross-Site Scripting Vulnerabilities
Exploits (1)
The exploit demonstrates a reflected XSS vulnerability in Kusaba X by injecting a malicious script via the 'id' parameter in the 'animation.php' endpoint. The payload executes arbitrary JavaScript in the context of the affected site, potentially leading to session hijacking or other client-side attacks.