---
id: 5111
title: "Researching Open Source apps for XSS to RCE flaws"
source_domain: swarm.ptsecurity.com
source_url: "https://swarm.ptsecurity.com/researching-open-source-apps-for-xss-to-rce-flaws/"
published_at: "2022-07-28T13:54:10Z"
tags: ["cloud", "rce", "xss", "evolution-cms", "fudforum", "gitbucket"]
phying_url: "https://phying.com/item/5111"
lang: en
---

# Researching Open Source apps for XSS to RCE flaws

## Summary

Case studies turning XSS into RCE: in Evolution CMS 3.1.8 reflected XSS abuses the admin file manager to overwrite index.php; FUDForum 3.1.1 has stored XSS via attachment names; plus GitBucket.

## Intelligence Metadata

- **Sources:** swarm.ptsecurity.com
- **Published:** 2022-07-28T13:54:10Z
- **Original:** https://swarm.ptsecurity.com/researching-open-source-apps-for-xss-to-rce-flaws/
- **Phying News:** https://phying.com/item/5111