Fanli2012 Native-PHP-CMS Cross-Site Scripting Vulnerability in fladmin/jump.php

A cross-site scripting (XSS) vulnerability has been identified in Fanli2012 native-php-cms version 1.0. The issue arises in the file fladmin/jump.php, where the message and error parameters are not properly sanitized. This lack of input validation allows attackers to inject malicious scripts that could be executed in the context of the user's browser, potentially leading to cookie theft or other malicious actions.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can inject and execute scripts in the context of the user.

Reproduction

To reproduce this vulnerability, send a request to fladmin/jump.php with either the message or error parameter containing a script tag, such as '<script>alert(1)</script>'. The injected script will be executed, demonstrating the cross-site scripting vulnerability.