EIP-2026-109593
PRE-CVEMouse Media Script 1.6 - Persistent Cross-Site Scripting
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-109593. PoCs published by Halil Dalabasmaz.
AI-analyzed exploit summary This exploit demonstrates a stored XSS vulnerability in Mouse Media Script v1.6, where an attacker can inject malicious JavaScript via the 'Title' or 'Description' fields during image upload. The payload executes when other users visit the homepage, stealing cookies or performing other malicious actions.
Description
Mouse Media Script 1.6 - Persistent Cross-Site Scripting
Exploits (1)
This exploit demonstrates a stored XSS vulnerability in Mouse Media Script v1.6, where an attacker can inject malicious JavaScript via the 'Title' or 'Description' fields during image upload. The payload executes when other users visit the homepage, stealing cookies or performing other malicious actions.