Executive brief
DRIMO CMS, a content management system used for building and managing websites, is vulnerable to a security flaw in its search feature. An attacker can trick a user into clicking a malicious link, allowing the attacker to run unauthorized scripts in the user's web browser. This could lead to the theft of login sessions or sensitive information displayed on the site.
Technical details
A Reflected Cross-Site Scripting (XSS) vulnerability exists in DRIMO CMS versions up to and including 1.0. The flaw is located in the search functionality, specifically within the 'q' parameter, which fails to properly neutralize user-supplied input before rendering it on the page (CWE-79). An unauthenticated remote attacker can exploit this by crafting a malicious URL and inducing a user to click it. Successful exploitation allows for arbitrary JavaScript execution in the context of the victim's browser session. As the product is End-of-Life (EOL), no official patches are available; however, deleting the 'info.php' file is a known mitigation.
Affected products
- DRIMO DRIMO CMS <= 1.0
Timeline
- 2026-06-23: disclosed
- 2026-06-23: advisory: Advisory published by CERT.PL