EIP-2026-109769
PRE-CVEMyIT CRM - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-109769. PoCs published by Juan Manuel Garcia.
AI-analyzed exploit summary The exploit demonstrates multiple XSS vulnerabilities in MyIT CRM 0.2.8.1 by injecting malicious JavaScript payloads into the 'name', 'employee_id', and 'page' parameters. The payloads bypass input sanitization and execute arbitrary script code in the context of the affected site.
Description
MyIT CRM - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Exploits (1)
The exploit demonstrates multiple XSS vulnerabilities in MyIT CRM 0.2.8.1 by injecting malicious JavaScript payloads into the 'name', 'employee_id', and 'page' parameters. The payloads bypass input sanitization and execute arbitrary script code in the context of the affected site.