UliCMS Stored Cross-Site Scripting Vulnerability via SVG File Upload

A stored cross-site scripting vulnerability has been identified in UliCMS version 2023.1. This issue allows attackers to upload malicious SVG files containing embedded JavaScript, which can execute arbitrary scripts when the files are viewed by other users. The vulnerability arises from the file management interface, where crafted SVG files can be uploaded and later accessed, triggering the embedded scripts.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where uploaded SVG files execute scripts in the context of users who view them.

Reproduction

To reproduce this vulnerability, upload a malicious SVG file through the file management interface. The SVG file should contain JavaScript embedded within a <script> tag. Once uploaded, the file can be accessed by other users, who will trigger the embedded script execution.