Stored XSS vulnerability

Henry_Lever

Hello,

I am a security researcher and have discovered a stored XSS vulnerability in this project. I have sent emails to the listed security contact containing a full write up with POC exploit but have not received a reply. Please check your spam folder. The reports will be from henrylevercyber@gmail.com

bazooka07

Hello,

See https://github.com/pluxml/PluXml/commit/48389e8e8924f1d08c0c4bac1c1623bc2894e35d#diff-3545ec633994293fdd4fde049458bd2b360757ea00f886d5123a065703fba597 in branch 5.8.10 for the file core/lib/class.plx.medias.php :

        if(mime_content_type($file['tmp_name']) == 'image/svg+xml' and preg_match('#</?script\b#', file_get_contents($file['tmp_name']))) {
            # Refus pour les images SVG avec tag <script> ( code malicieux possible )
            return L_PLXMEDIAS_WRONG_FILEFORMAT;
        }

Included in the next version 5.8.10 of PluXml. Published as soon as possible.

Henry_Lever

Hello sir,

Thank you for this. Glad to see it got fixed.