SVX Portal V.2.7A Reflected XSS Vulnerability Analysis

Key Information Vulnerability Type: Reflected XSS Target: SVX Portal V.2.7A Severity: High - CVSS 3.1 Base Score 7.5 Affected File/Component: Recivers.php (uses to generate attribute in HTML) Vulnerable Parameter: id (query string) Example Affected Request: GET /Recivers.php?id= Vulnerability Description This is a reflected XSS vulnerability. The application directly embeds the value of the query parameter into the attribute of multiple HTML elements without any encoding or validation. Attackers can exploit this by crafting malicious URLs to execute arbitrary scripts, steal cookies, perform DOM-based attacks, impersonate users, or launch further attacks. Technical Details The file Recivers.php contains multiple instances where the value of is directly inserted into the attribute of HTML elements. Due to the lack of output encoding and validation, malicious values can break attribute boundaries, inject HTML or script content, and lead to script execution. Exploitation Steps 1. As an unauthenticated attacker, construct a malicious URL with injected payload, e.g., . 2. Test the PoC using URL encoding, e.g., . 3. When the page is accessed and the event is triggered, the injected script executes. 4. Observe the JavaScript executing in the victim’s environment. Attackers can replace this with malicious logic such as data theft. Impact This vulnerability allows remote attackers to execute arbitrary JavaScript in the context of any user who visits the malicious URL. Real-world attack scenarios include stealing session cookies, impersonating users, performing CSRF attacks, and more. References OWASP XSS Prevention Cheat Sheet OWASP Top 10 - A03:2021 Injection/XSS-related Guidance

Goal Reached Thanks to every supporter — we hit 100%!

SVX Portal V.2.7A Reflected XSS Vulnerability Analysis