BEECMS cross site scripting

Vulnerability

A stored cross-site scripting (XSS) vulnerability exists in BEECMS 4.0, an unsupported product. The flaw is located in the file /admin/admin_content_tag.php with the action=save_content parameter. The tag argument is not properly sanitized before being stored, allowing an attacker to inject arbitrary JavaScript code. This vulnerability affects BEECMS 4.0 only [1].

Exploitation

An attacker with administrative access to the BEECMS admin panel can send a POST request to /admin/admin_content_tag.php?action=save_content with a malicious payload in the tag parameter (e.g., `). The payload is stored in the database. When an administrator subsequently visits the content list page at /admin/admin_content_tag.php?action=content_list`, the injected script executes in the context of the admin session [1].

Impact

Successful exploitation allows an attacker to execute arbitrary JavaScript in the browser of an authenticated admin user. This can lead to session hijacking, defacement of the admin panel, or theft of sensitive data displayed in the admin interface. The impact is limited to the admin area, but given that the product is unsupported, there is no official fix [1].

Mitigation

BEECMS 4.0 is a discontinued and unsupported version. No official patch exists for this vulnerability. Users are strongly advised to upgrade to a supported version of the software or migrate to an alternative content management system. Until then, restrict administrative access to trusted users only and monitor for unusual activity [1].