e107 CMS Upload Restriction Bypass Vulnerability Allowing SVG Files with XSS Payloads

An upload restriction bypass vulnerability has been identified in e107 CMS version 3.2.1. This vulnerability allows authenticated administrators to upload malicious SVG files through the media manager. Exploitation of this vulnerability involves embedding cross-site scripting (XSS) payloads within the SVG files, which can execute arbitrary scripts when the files are viewed.

Impact

Exploitation of this vulnerability leads to stored cross-site scripting, where uploaded SVG files execute scripts when accessed.

Reproduction

To reproduce this vulnerability, an authenticated administrator can upload an SVG file containing an XSS payload through the media manager. The uploaded file can then be accessed, triggering the execution of the embedded script.