Kichen cms xss targeted attacks allow attackers to obtain arbitrary user cookies.

Kichen CMS provides the Member registration function by default. The stored XSS vulnerability exists in the information module of the member station. You can use this vulnerability to send a message to the Administrator. Once the vulnerability is enabled, you can test multiple versions of kichen, this vulnerability basically exists. 1. Send a test to yourself in the insite email to prove that the vulnerability exists. Next, use the insite email to send a new message to the Administrator. 2. After logging on to the Administrator, the background interface displays a new message, if you are curious ?!..... 3. Click here. 4. Get the cookie.

 Solution:1. Disable the Member registration function. 2. How deep is the background logon page? 3. How deep is the logon authentication code?