EIP-2026-111467
PRE-CVEPragyan CMS 3.0 Beta - Multiple Cross-Site Scripting Vulnerabilities
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-111467. PoCs published by High-Tech Bridge SA.
AI-analyzed exploit summary This exploit demonstrates multiple stored XSS vulnerabilities in Pragyan CMS 3.0 beta by injecting malicious JavaScript into form inputs, which execute when submitted. The PoC shows how an attacker can steal cookies by embedding script tags in input fields.
Description
Pragyan CMS 3.0 Beta - Multiple Cross-Site Scripting Vulnerabilities
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by High-Tech Bridge SA · textwebappsphp
https://www.exploit-db.com/exploits/35409
This exploit demonstrates multiple stored XSS vulnerabilities in Pragyan CMS 3.0 beta by injecting malicious JavaScript into form inputs, which execute when submitted. The PoC shows how an attacker can steal cookies by embedding script tags in input fields.
Classification
Working Poc 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target:
Pragyan CMS 3.0 beta
No auth needed
Prerequisites:
Access to a vulnerable Pragyan CMS instance
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026