Perch CMS Stored Cross-Site Scripting Vulnerability via SVG File Upload

A stored cross-site scripting vulnerability has been identified in Perch CMS version 3.2. This issue allows authenticated users to upload malicious SVG files containing embedded JavaScript. When these files are viewed, the JavaScript executes, potentially stealing user session information or facilitating client-side attacks.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where uploaded SVG files execute JavaScript when accessed, leading to session theft or client-side attacks.

Reproduction

To reproduce this vulnerability, log into an account on Perch CMS 3.2 and navigate to the settings page. Upload an SVG file crafted with a script tag, such as one that alerts the document location. After uploading, access the SVG file through the resources directory to trigger the JavaScript execution.