bytereaper77/cve-2025-54589PoC for CVE-2025-54589 – a reflected XSS vulnerability in Copyparty ≤ 1.18.6.
Author: Byte Reaper
This repository provides a Proof-of-Concept (PoC) and simple exploit for CVE-2025-54589, a reflected Cross-Site Scripting (XSS) vulnerability in Copyparty ≤ 1.18.6.
By injecting crafted JavaScript payloads into the filter parameter, this tool automates detection of the vulnerability and logs successful reflections.
--no-color)results.txtgcc exploit.c argparse.c -o exploit -lcurl
./exploit -i <IP> -p <PORT> -c <COOKIES_FILE> -a <CA_FILE> -v
./exploit -v -i 1.1.1.1 -p 80
./exploit -n -i 1.1.1.1 -p 443
2 - Check results.txt for a summary of payloads and server responses.
MIT License