EIP-2026-113277
PRE-CVEwebERP 4.3.8 - Multiple Script URI Cross-Site Scripting Vulnerabilities
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-113277. PoCs published by High-Tech Bridge SA.
AI-analyzed exploit summary The provided code demonstrates multiple XSS vulnerabilities in webERP 4.0.5 by injecting JavaScript payloads into various endpoints. The payloads are designed to execute arbitrary script code in the context of the affected site, potentially leading to cookie theft or further attacks.
Description
webERP 4.3.8 - Multiple Script URI Cross-Site Scripting Vulnerabilities
Exploits (1)
The provided code demonstrates multiple XSS vulnerabilities in webERP 4.0.5 by injecting JavaScript payloads into various endpoints. The payloads are designed to execute arbitrary script code in the context of the affected site, potentially leading to cookie theft or further attacks.