EIP-2026-109104

PRE-CVE

LibGuides - Multiple Cross-Site Scripting Vulnerabilities

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-109104. PoCs published by Crim3R.

AI-analyzed exploit summary This exploit demonstrates multiple XSS vulnerabilities in LibGuides by injecting arbitrary JavaScript via unsanitized input parameters in URLs. The PoC includes crafted URLs that trigger script execution in the context of the affected site.

Description

LibGuides - Multiple Cross-Site Scripting Vulnerabilities

Exploits (1)

exploitdb WORKING POC VERIFIED

by Crim3R · textwebappsphp

https://www.exploit-db.com/exploits/37679

View Code ZIP pw:eip

This exploit demonstrates multiple XSS vulnerabilities in LibGuides by injecting arbitrary JavaScript via unsanitized input parameters in URLs. The PoC includes crafted URLs that trigger script execution in the context of the affected site.

Classification

Working Poc 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Reliable

Target: LibGuides (version unspecified)

No auth needed

Prerequisites: Access to the target application's URL endpoints

MITRE ATT&CK

T1059.007 - JavaScript

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026