Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-113093. PoCs published by NassRawI.
AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in VidiScript due to improper input sanitization. The vulnerability allows arbitrary script execution in the context of the affected site via the 'vp' parameter in the URL.
Description
VidiScript - 'vp' Cross-Site Scripting
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by NassRawI · textwebappsphp
https://www.exploit-db.com/exploits/35405
The provided text describes a cross-site scripting (XSS) vulnerability in VidiScript due to improper input sanitization. The vulnerability allows arbitrary script execution in the context of the affected site via the 'vp' parameter in the URL.
Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target:
VidiScript (version not specified)
No auth needed
Prerequisites:
Access to the vulnerable VidiScript application
MITRE ATT&CK
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026