liufee/feehicms

FeehiCMS template

feehicms's Issues

There are some XSS vulnerabilities in FeehiCMS-2.1.1

There is a stored XSS vulnerability in the background of FeehiCMS.

First register a user for testing, then go to Content -> Single Page, upload any picture in the comment box.

Then send a comment, capture the odd packet while sending the Forward, change the value of SRC under the

tag in the packet to: 'x' [onerror='alert(1)', and send the message.

Refresh the page, and pop-up windows will appear on the current page and the home page.

backend/grid/DateColumn.php时间格式化问题

public $format = ['datetime', 'php:Y-m-d H:m'];
should modify to
public $format = ['datetime', 'php:Y-m-d H:i:s'];

View log details Reflected-XSS vulnerabilities in the background.

Which version of FeehiCMS do you tesing?

v2.1.1

Expected behavior

View log details

Actual behavior

View log details Reflected-XSS vulnerabilities in the background of FeehiCMS .

Steps to reproduce the behavior

{
URL：http://127.0.0.1:8080/feehicms/frontend/web/admin/index.php?r=log%2Fview-layer
POC:%3Csvg%20onload=alert(20221014)%3E
}

1. register a user for testing.

2. go to Content -> Log Page, open one loginfo to view details.
   

3. find id parameter in url and Insert poc after the id.
   （The page automatically loads and triggers XSS.）
   

Cross-site scripting vulnerability exists in Feehicms

Due to the lax filtering of tag parameters, JS code can be inserted to cause cross-site scripting attacks.If the tag parameter is assigned to "<script>alert(123)</script>".Submitting in get mode can cause cross-site script attack.

The exp code is as follows：
http://127.0.0.1/index.php?r=search%2Ftag&tag=<script>alert(123)</script>