Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-111114. PoCs published by High-Tech Bridge SA.
AI-analyzed exploit summary This exploit demonstrates a stored XSS vulnerability in PHPList by injecting malicious JavaScript into the 'email' field of a user profile form. The script executes when the form is submitted, potentially stealing cookies or performing other malicious actions in the context of the affected site.
Description
phpList 2.10.x - 'email' Cross-Site Scripting
Exploits (1)
This exploit demonstrates a stored XSS vulnerability in PHPList by injecting malicious JavaScript into the 'email' field of a user profile form. The script executes when the form is submitted, potentially stealing cookies or performing other malicious actions in the context of the affected site.