Executive Summary

This vulnerability allows low-privileged users to exploit their Full Name field as a vector for a stored Cross-Site Scripting (XSS) attack. The Full Name is included in system-generated emails, and the email content is stored in the userlog table. When an admin user views this email content through a specific interface (userlog-details.php), any malicious JavaScript embedded in the Full Name is executed because the output is not properly sanitized.

The issue has been addressed by adding proper escaping to the userlog details output to prevent execution of malicious scripts.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability could allow an attacker with low privileges to execute malicious JavaScript code in the context of an admin user viewing the userlog details. This could lead to unauthorized actions performed by the admin user, such as session hijacking, data theft, or other malicious activities that rely on executing scripts in the admin's browser.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, ensure that proper escaping and output sanitisation are applied to the userlog details output, especially in userlog-details.php where system-generated emails including user Full Names are displayed.

Restrict the ability of low-privileged users to input malicious scripts in their Full Name field, and review the system to confirm that the patch or update addressing this issue has been applied.

Useful 0 Not Useful 0