XunRuiCMS v4.7.1 Stored XSS via SVG Upload

Key Information Vulnerability Description Type: Stored XSS (via SVG file upload) Product: XunRuiCMS v4.7.1 Affected Products Product: XunRuiCMS Version: 4.7.1 Component: Admin/Files/Library/Upload.php (PHP code vulnerable) CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Technical Details Affected Code: SVG handling section in . Vulnerability Cause: SVG images are not properly validated, allowing embedded malicious JavaScript code. Proof of Concept (PoC) SVG Code: Steps: 1. Save the above SVG code as an SVG file and upload it. 2. When accessing the uploaded SVG file, the XSS attack is triggered. Impact 1. Execution of arbitrary JavaScript code. 2. Theft of sensitive information such as Cookies. 3. Execution of Denial-of-Service (DoS) attacks. 4. Potential access to additional server resources. Vulnerability Code Analysis The SVG file handling section in contains a flaw, lacking sufficient validation and filtering of SVG content. Remediation Recommendations 1. Implement strict validation and filtering for uploaded SVG files. 2. Consider using Content Security Policy (CSP) to restrict JavaScript execution. 3. Update SVG processing libraries to the latest versions. 4. Use secure SVG rendering libraries to avoid directly parsing user-uploaded content. 5. Disable unnecessary features to reduce the attack surface. Timeline 2023-08-08: Vulnerability discovered. 2023-08-08: Vulnerability report submitted to vendor. [Future Date]: Vendor releases patch. [Future Date]: CVE ID assigned. References 1. [CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')] 2. [OWASP XSS Prevention Cheat Sheet] 3. [SVG Security Considerations] 4. [XunRuiCMS Official Repository]

Goal Reached Thanks to every supporter — we hit 100%!

XunRuiCMS v4.7.1 Stored XSS via SVG Upload