BaseFortify

Executive Summary

This vulnerability is a stored Cross-Site Scripting (XSS) issue in Perch CMS version 3.2. An attacker who is authenticated and has administrative privileges can inject malicious JavaScript code into the 'Help button url' setting in the admin panel. This malicious code is then stored and executed whenever any authenticated user clicks the Help button, potentially compromising their session and security.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to session hijacking, information disclosure, privilege escalation, and unauthorized administrative actions. This means attackers can steal user sessions, access sensitive information, gain higher privileges, or perform actions without authorization, compromising the security and integrity of the system and its users.

Useful 0 Not Useful 0

Detection Guidance

Detection involves checking the 'Help button url' setting in the Perch CMS admin panel for any injected JavaScript code. Since the vulnerability is stored XSS triggered when authenticated users click the Help button, you can audit the database or configuration files for suspicious script tags or JavaScript payloads in this setting. Specific commands are not provided in the resources, but inspecting the relevant database entries or configuration files for the 'Help button url' field for suspicious content is recommended. [2]

Useful 0 Not Useful 0

Mitigation Strategies

Immediate mitigation steps include restricting administrative access to trusted users only, reviewing and sanitizing the 'Help button url' setting to remove any injected scripts, and applying any available patches or updates to Perch CMS once released. Additionally, educating users to avoid clicking the Help button until the issue is resolved can reduce risk. [2]

Useful 0 Not Useful 0