EIP-2026-114489
PRE-CVExt:Commerce VEYTON 4.0.15 - 'products_name_de' Script Insertion
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-114489. PoCs published by LiquidWorm.
AI-analyzed exploit summary This is a functional proof-of-concept for a stored XSS vulnerability in xt:Commerce VEYTON 4.0.15. It demonstrates how an attacker can inject malicious JavaScript via the 'products_name_de' parameter, which is then stored and executed in the context of a user's browser session.
Description
xt:Commerce VEYTON 4.0.15 - 'products_name_de' Script Insertion
Exploits (1)
This is a functional proof-of-concept for a stored XSS vulnerability in xt:Commerce VEYTON 4.0.15. It demonstrates how an attacker can inject malicious JavaScript via the 'products_name_de' parameter, which is then stored and executed in the context of a user's browser session.