EIP-2026-111451
PRE-CVEPowerMovieList 0.13/0.14 - Edit User HTML Injection
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-111451. PoCs published by MP.
AI-analyzed exploit summary This Perl script exploits an XSS vulnerability in PowerMovieList <= 0.14 Beta by injecting malicious JavaScript into the 'email' field during user registration, which exfiltrates cookies to an attacker-controlled server. The script automates the attack by sending multiple requests, optionally through a proxy.
Description
PowerMovieList 0.13/0.14 - Edit User HTML Injection
Exploits (1)
This Perl script exploits an XSS vulnerability in PowerMovieList <= 0.14 Beta by injecting malicious JavaScript into the 'email' field during user registration, which exfiltrates cookies to an attacker-controlled server. The script automates the attack by sending multiple requests, optionally through a proxy.