Feehi CMS 2.1.1 - Stored Cross-Site Scripting (Stored XSS) in Article Content.

[thinhneee]

Severity Score: Medium
CVSS score: 6.9
Vecto string: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N

Description:

Feehi CMS 2.1.1 allows authenticated user create the article but lack of santitize or filter input in the content. Leak to attacker can inject the XSS payload. It store the payload in the database.

Impact:

If user or admin click to the article contain Stored XSS payload, attacker can steal the cookie of the victim.

POC

Step 1: Create a new article

Step 2: Intercept the request and enter the payload in content

Step 3: Send it and view the article contain Stored XSS.

Mitigare:

1/ Use filters to filter tags or events.
2/ Implenment a whitelist in case you want to use certain tags.