Description
Xavier PHP Management Panel 3.0 is vulnerable to Reflected POST-based XSS via the username parameter when registering a new user at admin/includes/adminprocess.php. If there is an error when registering the user, the unsanitized username will reflect via the error page. Due to the lack of CSRF protection on the admin/includes/adminprocess.php endpoint, an attacker is able to chain the XSS with CSRF in order to cause remote exploitation.
References (2)
Core 2
Core References
Product x_refsource_misc
https://codecanyon.net/item/xavier-php-login-script-user-management/9146226
Exploit, Third Party Advisory x_refsource_misc
https://m-q-t.github.io/notes/xavier-csrf-to-xss-takeover/
Scores
CVSS v3
6.1
EPSS
0.0043
EPSS Percentile
34.6%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Details
CWE
CWE-352
CWE-79
Status
published
Products (1)
angry-frog/xavier
3.0
Published
Jul 26, 2019
Tracked Since
Feb 18, 2026