YiFang CMS Cross-Site Scripting Vulnerability in D_singlePage.php

A cross-site scripting (XSS) vulnerability has been identified in YiFang CMS version 2.0.5. The issue arises in the 'update' function of 'app/db/admin/D_singlePage.php', where the 'title' parameter is processed. This vulnerability allows for stored XSS, as the 'title' input is saved to the database without proper sanitization. When the single-page list is accessed, the injected scripts are executed. The vulnerability can be exploited remotely, and a public exploit is available.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, send a POST request to the '/admin/singlePage' endpoint with the 'title' parameter containing a script, such as an SVG tag with an 'onload' event. This request should include the necessary headers and cookies to simulate an authenticated user. Once the request is processed, the injected script will execute when the single-page list is accessed.