Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-111353. PoCs published by High-Tech Bridge SA.
AI-analyzed exploit summary This exploit demonstrates an HTML injection vulnerability in Pluck CMS, where user-supplied input is not properly sanitized. The PoC includes a form with a hidden input field containing a script tag that triggers an alert with the document cookie, confirming the XSS vulnerability.
Description
Pluck CMS 4.6.3 - 'cont1' HTML Injection
Exploits (1)
This exploit demonstrates an HTML injection vulnerability in Pluck CMS, where user-supplied input is not properly sanitized. The PoC includes a form with a hidden input field containing a script tag that triggers an alert with the document cookie, confirming the XSS vulnerability.