EIP-2026-112816
PRE-CVETuttoPHP Morris Guestbook - 'view.php' Cross-Site Scripting
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-112816. PoCs published by Moudi.
AI-analyzed exploit summary The exploit demonstrates a reflected XSS vulnerability in Morris Guestbook by injecting a malicious script via the 'pagina' parameter in the URL. The payload executes arbitrary JavaScript in the context of the affected site, potentially stealing cookies or performing other malicious actions.
Description
TuttoPHP Morris Guestbook - 'view.php' Cross-Site Scripting
Exploits (1)
The exploit demonstrates a reflected XSS vulnerability in Morris Guestbook by injecting a malicious script via the 'pagina' parameter in the URL. The payload executes arbitrary JavaScript in the context of the affected site, potentially stealing cookies or performing other malicious actions.