EIP-2026-109314
PRE-CVEManila 9.0.1 - Multiple Cross-Site Scripting Vulnerabilities
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-109314. PoCs published by Aaron Kaplan.
AI-analyzed exploit summary The exploit demonstrates multiple XSS vulnerabilities in Manila by injecting arbitrary script code via unsanitized input in the 'mode' and 'referer' parameters. The PoC includes direct URLs with payloads that trigger JavaScript execution in the context of the affected site.
Description
Manila 9.0.1 - Multiple Cross-Site Scripting Vulnerabilities
Exploits (1)
The exploit demonstrates multiple XSS vulnerabilities in Manila by injecting arbitrary script code via unsanitized input in the 'mode' and 'referer' parameters. The PoC includes direct URLs with payloads that trigger JavaScript execution in the context of the affected site.