关键信息 漏洞名称 - SVXportal <= 2.5 admin/user_action.php Stored XSS 严重程度 - Medium 日期 - 2022-02-20 影响版本 - SVXportal <= 2.5 CVE编号 - CVE-2022-27505 CWE编号 - CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') CVSS评分 - 4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N 描述 - SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user registration workflow (index.php submitting to admin/user_action.php). User-supplied fields such as Firstname, lastname, and email are stored in the backend database without adequate output encoding and are later rendered in the administrator interface (admin/users.php), allowing an unauthenticated remote attacker to inject arbitrary JavaScript that executes in an administrator's browser upon viewing the affected page. 发现者 - phlopentest 参考资料 - SVXportal Vulnerable Path