EIP-2026-114516
PRE-CVEYektaweb Academic Web Tools CMS 1.4.2.8/1.5.7 - Multiple Cross-Site Scripting Vulnerabilities
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-114516. PoCs published by Isfahan.
AI-analyzed exploit summary The exploit demonstrates multiple reflected XSS vulnerabilities in Yektaweb Academic Web Tools CMS by injecting malicious scripts via unsanitized input parameters in login.php, page_arch.php, and page.php. The payloads execute arbitrary JavaScript in the context of the affected site.
Description
Yektaweb Academic Web Tools CMS 1.4.2.8/1.5.7 - Multiple Cross-Site Scripting Vulnerabilities
Exploits (1)
The exploit demonstrates multiple reflected XSS vulnerabilities in Yektaweb Academic Web Tools CMS by injecting malicious scripts via unsanitized input parameters in login.php, page_arch.php, and page.php. The payloads execute arbitrary JavaScript in the context of the affected site.