Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-109218. PoCs published by High-Tech Bridge SA.
AI-analyzed exploit summary The provided code contains functional proof-of-concept exploits for multiple vulnerabilities in LotusCMS 3.0.3, including CSRF and XSS (both stored and reflected). The PoCs demonstrate how an attacker can craft malicious HTTP requests to exploit these vulnerabilities.
Description
LotusCMS 3.0.3 - Multiple Vulnerabilities
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by High-Tech Bridge SA · textwebappsphp
https://www.exploit-db.com/exploits/16982
The provided code contains functional proof-of-concept exploits for multiple vulnerabilities in LotusCMS 3.0.3, including CSRF and XSS (both stored and reflected). The PoCs demonstrate how an attacker can craft malicious HTTP requests to exploit these vulnerabilities.
Classification
Working Poc 100%
Attack Type
Xss | Csrf
Complexity
Trivial
Reliability
Reliable
Target:
LotusCMS 3.0.3 and prior versions
No auth needed
Prerequisites:
Victim interaction (e.g., clicking a link or visiting a malicious page)
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026