JiZhiCMS Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in JiZhiCMS versions through 2.5.6. The issue resides in the release function of the UserController, where the application inadequately sanitizes input. While it filters out script tags, it fails to remove harmful event handler attributes from other HTML elements, such as the onerror attribute in image tags. This oversight enables authenticated remote attackers to inject arbitrary web scripts or HTML by exploiting the body parameter in a POST request to /user/release.html.

Impact

Exploitation of this vulnerability allows for the execution of arbitrary JavaScript in the context of the victim's browser. This could lead to session theft or abuse of privileges, depending on the victim's user rights.