ClassCMS Cross-Site Scripting Vulnerability in Channel Management Interface

A stored cross-site scripting vulnerability has been identified in ClassCMS version 4.8. The issue resides in the channel management interface, specifically within the 'class/admin/channel.php' file. The vulnerability occurs because user input is not properly sanitized, allowing for the injection of malicious scripts.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user.

Reproduction

To reproduce this vulnerability, send a POST request to the '/admin/?do=admin:channel:addPost' endpoint. Include a payload in the 'channelname' field that contains unescaped HTML, such as a script tag or an event handler, like 'onclick'. The request must also include a valid CSRF token and any necessary cookies to authenticate the session.

Remediation

It is recommended to update ClassCMS to a version where this vulnerability has been addressed. If no such version is available, consider applying manual patches to sanitize user inputs in the affected channel management interface.