Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-114388. PoCs published by cyberlog.
AI-analyzed exploit summary The exploit demonstrates a cross-site scripting (XSS) vulnerability in wsCMS by injecting a malicious script into the 'id' parameter of the news.php page. The payload executes arbitrary JavaScript in the context of the affected site, potentially leading to credential theft or other client-side attacks.
Description
wsCMS - 'news.php' Cross-Site Scripting
Exploits (1)
The exploit demonstrates a cross-site scripting (XSS) vulnerability in wsCMS by injecting a malicious script into the 'id' parameter of the news.php page. The payload executes arbitrary JavaScript in the context of the affected site, potentially leading to credential theft or other client-side attacks.