EIP-2026-112811
PRE-CVETurnkeySetup Net Marketing 6.0 - 'faqs.php' Cross-Site Scripting
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-112811. PoCs published by Moudi.
AI-analyzed exploit summary The exploit demonstrates a reflected XSS vulnerability in TurnkeySetup Net Marketing 6.0 by injecting a malicious script via the 'cat' parameter in the FAQs page. The payload executes arbitrary JavaScript in the context of the affected site, potentially stealing cookies or performing other malicious actions.
Description
TurnkeySetup Net Marketing 6.0 - 'faqs.php' Cross-Site Scripting
Exploits (1)
The exploit demonstrates a reflected XSS vulnerability in TurnkeySetup Net Marketing 6.0 by injecting a malicious script via the 'cat' parameter in the FAQs page. The payload executes arbitrary JavaScript in the context of the affected site, potentially stealing cookies or performing other malicious actions.