Cookie-Injection — PoC Archivehttps://poc.intelseclab.com/tags/cookie-injection/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Form Notify WordPress Plugin — LINE OAuth Authentication Bypass to Account Takeover (CVE-2026-5229)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-5229-form-notify-line-oauth-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-5229-form-notify-line-oauth-bypass/Critical severity (CVSS 9.8) — web · CVE-2026-5229. Status: PoC. Affects: Form Notify WordPress plugin, LINE Login OAuth 2.0 integration (src/APIs/Line/Login/Route.php, User.php). Tags: wordpress, form-notify, oauth, line-login, authentication-bypass, account-takeover, cookie-injection, cve-2026-5229.webCriticalwordpressform-notifyoauthline-loginauthentication-bypassaccount-takeovercookie-injectioncve-2026-5229Bookly Booking Form Cookie-Based Stored XSS — CVE-2026-5513https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-5513-bookly-cookie-stored-xss/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-5513-bookly-cookie-stored-xss/High severity (CVSS 7.2) — web · CVE-2026-5513. Status: PoC. Affects: Bookly — Online Scheduling and Appointment Booking System (WordPress plugin). Tags: wordpress, bookly, stored-xss, cwe-79, cookie-injection, appointment-booking.webHighwordpressbooklystored-xsscwe-79cookie-injectionappointment-booking