EIP-2026-109719

PRE-CVE

MyBB KingChat Plugin - Persistent Cross-Site Scripting

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-109719. PoCs published by VipVince.

AI-analyzed exploit summary This is a writeup describing a persistent XSS vulnerability in the MyBB 'kingchat' plugin. The exploit involves manipulating the URL parameters to inject and store malicious JavaScript code.

Description

MyBB KingChat Plugin - Persistent Cross-Site Scripting

Exploits (1)

exploitdb WRITEUP

by VipVince · textwebappsphp

https://www.exploit-db.com/exploits/23249

View Code ZIP pw:eip

This is a writeup describing a persistent XSS vulnerability in the MyBB 'kingchat' plugin. The exploit involves manipulating the URL parameters to inject and store malicious JavaScript code.

Classification

Writeup 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Reliable

Target: MyBB kingchat plugin

Auth required

Prerequisites: Registration on the target forum · Access to the kingchat.php page

MITRE ATT&CK

T1059.007 - JavaScript

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026