XSS upload file to *.SVG in Zenario CMS 9.0.54156

[hieuminhnv]

Summary
hi team,
I found small XSS upload file to SVG.

Info

1. Zenario CMS 9.0.54156 last version
2. FireFox 92.0.1 (64-bit)

Steps

1. Login to account http://xxx.xxx.x.x/admin.php?cID=1&cType=html

2. Choose Users & Contacts and create any user
3. Click Image >> Upload an image

4. use burpsuite and capture request file a.svg

5. click to image avatar >> click right mouse >> Inspect Element (F12) >> found to link vlun svg

6. Copy domain >> open web >> BOOM XSS alert message

Inpact :
Attacker can send malicious files to victims and steals victim's cookie leads to account takeover.
The person viewing the image of a contact can be victim of XSS.