EIP-2026-112154
PRE-CVESimplephpscripts Simple CMS 2.1 - 'Multiple' Stored Cross-Site Scripting (XSS)
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-112154. PoCs published by Vulnerability-Lab.
AI-analyzed exploit summary This is a working proof-of-concept for a stored XSS vulnerability in Simplephpscripts Simple CMS 2.1. The exploit demonstrates how an authenticated attacker can inject malicious JavaScript payloads into user input fields (name, username, password), which execute when the user list is viewed.
Description
Simplephpscripts Simple CMS 2.1 - 'Multiple' Stored Cross-Site Scripting (XSS)
Exploits (1)
This is a working proof-of-concept for a stored XSS vulnerability in Simplephpscripts Simple CMS 2.1. The exploit demonstrates how an authenticated attacker can inject malicious JavaScript payloads into user input fields (name, username, password), which execute when the user list is viewed.