Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-111255. PoCs published by MustLive.
AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in PHPXref versions prior to 0.7. The vulnerability arises from insufficient input sanitization, allowing arbitrary script execution in the context of the affected site.
Description
PHPXref 0.7 - 'nav.html' Cross-Site Scripting
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by MustLive · textwebappsphp
https://www.exploit-db.com/exploits/35329
The provided text describes a cross-site scripting (XSS) vulnerability in PHPXref versions prior to 0.7. The vulnerability arises from insufficient input sanitization, allowing arbitrary script execution in the context of the affected site.
Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target:
PHPXref < 0.7
No auth needed
Prerequisites:
A vulnerable version of PHPXref · User interaction to trigger the malicious URL
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026