mirror of
https://github.com/Piwigo/Piwigo.git
synced 2026-10-30 21:52:00 +01:00
There is a XSS vulnerability in the "add tags" function of piwigo #1666
Assignees
adam (Adam Wojcieszonek)
Clear assignees
adam (Adam Wojcieszonek)
No Assignees
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: adam/Piwigo#1666
Reference in new issue
Block a user
This vulnerability lies in the 'add tags' function in the backend.
Try adding a tag, and we will name it an HTML code
Try adding it, and we will find that our HTML code has been successfully embedded in the front-end
Interestingly, when the administrator attempts to delete it, it will also trigger again(three times)
Of course, not only can img be used here, but it can also use more dangerous html code such as scripts.This may cause administrator COOKIE leakage or other more serious risks
In my previous issue submission, I mentioned the CSRF vulnerability.In my previous issue submission, I mentioned the CSRF vulnerability. In fact, it can be combined with XSS vulnerabilities.
We can generate such a CSRF POC
After the administrator triggers it, a tag with malicious HTML code will be generated in the background. When the administrator accidentally accesses the tag, it can cause an attack
Oh, I forgot, the affected version is the latest 13.6.0
It seems that XSS vulnerabilities can also be triggered when editing tags
