MRCMS Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability exists in MRCMS version 3.1.2, specifically within the admin group management component. This issue allows for the injection of malicious scripts that could be executed in the context of the user's browser.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, navigate to the group management page in the admin panel. Add a new group and enter a payload containing JavaScript into the group name and description fields. Once the group is saved, the injected script will execute, demonstrating the cross-site scripting vulnerability.

Remediation

It is recommended to implement input validation to sanitize user inputs and prevent the injection of malicious scripts.