CVE-2025-55888 PoC — ARD GEC en Ligne 安全漏洞

Source

https://github.com/0xZeroSec/CVE-2025-55888

Associated Vulnerability

Title: ARD GEC en Ligne 安全漏洞 (CVE-2025-55888)
Description:Cross-Site Scripting (XSS) vulnerability was discovered in the Ajax transaction manager endpoint of ARD. An attacker can intercept the Ajax response and inject malicious JavaScript into the accountName field. This input is not properly sanitized or encoded when rendered, allowing script execution in the context of users browsers. This flaw could lead to session hijacking, cookie theft, and other malicious actions.

Readme

# CVE-2025-55888
### Description
Cross-Site Scripting (XSS) vulnerability was discovered in the Ajax
transaction manager endpoint of ARD. An attacker can intercept the Ajax
response and inject malicious JavaScript into the accountName field.
This input is not properly sanitized or encoded when rendered, allowing
script execution in the context of users browsers. This flaw could lead
to session hijacking, cookie theft, and other malicious actions.

### Proof Of Concept
**Payload Injection**
![Screenshot of exploit](assets/exploit.png)

**Screenshot of vulnerability**
![Screenshot of vulnerability](assets/poc.png)

### Reseachers
- [tryon-dev](https://github.com/tryon-dev)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →