Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-111549. PoCs published by Zerial.
AI-analyzed exploit summary This exploit demonstrates a cross-site scripting (XSS) vulnerability in Prontus CMS by injecting JavaScript code via the 'page' parameter in the URL. The vulnerability arises due to insufficient input sanitization, allowing arbitrary script execution in the context of the affected site.
Description
Prontus CMS - 'page' Cross-Site Scripting
Exploits (1)
This exploit demonstrates a cross-site scripting (XSS) vulnerability in Prontus CMS by injecting JavaScript code via the 'page' parameter in the URL. The vulnerability arises due to insufficient input sanitization, allowing arbitrary script execution in the context of the affected site.