EIP-2026-112528
PRE-CVESyndeoCMS 2.9 - Multiple HTML Injection Vulnerabilities
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-112528. PoCs published by High-Tech Bridge SA.
AI-analyzed exploit summary This exploit demonstrates multiple HTML injection vulnerabilities in SyndeoCMS 2.9.0 by injecting malicious scripts into form fields, which execute in the context of the affected browser. The PoC includes crafted form submissions targeting specific modules to trigger XSS via unsanitized input.
Description
SyndeoCMS 2.9 - Multiple HTML Injection Vulnerabilities
Exploits (1)
This exploit demonstrates multiple HTML injection vulnerabilities in SyndeoCMS 2.9.0 by injecting malicious scripts into form fields, which execute in the context of the affected browser. The PoC includes crafted form submissions targeting specific modules to trigger XSS via unsanitized input.