ARS Reg Secure - Reflected cross-site scripting (XSS)

Summary

Name	ARS Reg Secure 1. - Reflected cross-site scripting (XSS)
Code name	skims-0056
Product	ARS Reg Secure
Affected versions	Version 1.
State	Private
Release date	2025-03-14

Vulnerability

Kind	Reflected cross-site scripting (XSS)
Rule	Reflected cross-site scripting (XSS)
Remote	No
CVSSv4 Vector	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:L/VA:L/SC:L/SI:L/SA:L/E:U
CVSSv4 Base Score	4.8 (Medium)
Exploit available	No
CVE ID(s)	CVE-2025-31317

Description

ARS Reg Secure 1. was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/includes/core.php.

Vulnerability

Skims by Fluid Attacks discovered a Reflected cross-site scripting (XSS) in ARS Reg Secure 1.. The following is the output of the tool:

Skims output

 13 | function show_custom_field() {
 14 |
 15 | ?>
 16 |
 17 | <p>
 18 |
 19 | <label><?php echo get_option('ars_question'); ?></label><br />
 20 |
> 21 | <input id=""ars-custom-field"" class=""input"" type=""text"" name=""ars-custom-field"" value=""<?php echo $_POST['ars-custom-fiel
 22 |
 23 | </p>
  24 |
  25 | <?php
  26 |
  27 | }
     ^ Col 0

Our security policy

We have reserved the ID CVE-2025-31317 to refer to this issue from now on.

• https://fluidattacks.com/advisories/policy/

System Information

• Product: ARS Reg Secure
• Version: 1.

Mitigation

There is currently no patch available for this vulnerability.

Credits

The vulnerability was discovered by Andres Roldan from Fluid Attacks' Offensive Team using Skims

Timeline