Unauthorized upload of XML file to execute XSS

[Curta1n-7]

Hi i found an xss vulnerability on Feehi CMS backend

What is XSS?

Attacker can inject and executee javascript code to webpage.

Then access this directory