EIP-2026-111093
PRE-CVEPHPJabbers Simple CMS 5 - 'name' Persistent Cross-Site Scripting (XSS)
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-111093. PoCs published by Vulnerability-Lab.
AI-analyzed exploit summary This is a working proof-of-concept for a persistent XSS vulnerability in PHPJabbers Simple CMS v5. The exploit demonstrates how an authenticated attacker with moderator privileges can inject malicious JavaScript payloads via the 'name' parameter in user creation/update actions, leading to session hijacking or phishing attacks.
Description
PHPJabbers Simple CMS 5 - 'name' Persistent Cross-Site Scripting (XSS)
Exploits (1)
This is a working proof-of-concept for a persistent XSS vulnerability in PHPJabbers Simple CMS v5. The exploit demonstrates how an authenticated attacker with moderator privileges can inject malicious JavaScript payloads via the 'name' parameter in user creation/update actions, leading to session hijacking or phishing attacks.