EIP-2026-111912
PRE-CVESavsoft Quiz 5 - Persistent Cross-Site Scripting
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-111912. PoCs published by th3d1gger.
AI-analyzed exploit summary This exploit demonstrates a persistent XSS vulnerability in Savsoft Quiz 5.0 by injecting malicious payloads into the 'first_name' field during user registration. The vulnerable code does not sanitize user input, allowing arbitrary JavaScript execution in the context of other users' sessions.
Description
Savsoft Quiz 5 - Persistent Cross-Site Scripting
Exploits (1)
This exploit demonstrates a persistent XSS vulnerability in Savsoft Quiz 5.0 by injecting malicious payloads into the 'first_name' field during user registration. The vulnerable code does not sanitize user input, allowing arbitrary JavaScript execution in the context of other users' sessions.