MRCMS Stored Cross-Site Scripting Vulnerability in Version 3.1.2

A stored cross-site scripting vulnerability has been identified in MRCMS version 3.1.2, specifically within the External Link Management Page at the file path /admin/link/edit.do. This vulnerability allows for the injection of malicious scripts that are permanently stored and can be executed later, potentially stealing sensitive user information, altering page content, and disseminating malware, which poses serious risks to user privacy and the reputation of the website.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user.