Feehi CMS 2.1.1 - Stored Cross-Site Scripting (Stored XSS) in Article Title.

[thinhneee]

Severity Score: Medium
CVSS score: 6.9
Vecto string: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N

Description:

Feehi CMS 2.1.1 allows authenticated user create the article but lack of santitize or filter input in the title field. Leak to attacker can inject the XSS payload. It store the payload in the database.

Impact:

If user or admin click to the article contain Stored XSS payload, attacker can steal the cookie of the victim.

POC:

Step 1: Create new article.
Step 2: In the title field enter XSS payload.

Step 3: Save article and view that the payload is stored.

Mitigare:

1/ Use filters to filter tags or events.
2/ Implenment a whitelist in case you want to use certain tags.