CVE-2020-20725

Vulnerability

taoCMS version 2.5 beta5.1 contains a stored Cross-Site Scripting (XSS) vulnerability in the name field of admin.php. An attacker can inject arbitrary JavaScript code via this input field, which is then stored and executed when the admin page is viewed. The vulnerability is documented in the project's issue tracker [1].

Exploitation

An attacker can send a crafted HTTP request to admin.php with malicious JavaScript in the name parameter. The payload is stored and executed in the browser of any administrator who accesses the affected page. No authentication is required if the admin panel is publicly accessible, as the vulnerability is triggered upon viewing the stored data.

Impact

Successful exploitation allows the attacker to execute arbitrary JavaScript in the context of the administrator's session. This can lead to session hijacking, defacement, theft of sensitive data, or further compromise of the application.

Mitigation

As of the available reference [1], no official patch has been released. Users should upgrade to a patched version if available, or apply input sanitization to the name field. The software may be end-of-life; check vendor status for updates.