An authenticated attacker can exploit multiple file upload vulnerabilities in RomM to execute malicious scripts and achieve full administrative account takeover.

This flaw involves unrestricted file uploads that permit the storage of malicious SVG or HTML files. When accessed, these files trigger stored XSS, which, when combined with CSRF vulnerabilities, allows an authenticated user to escalate privileges or create unauthorized administrative accounts.

The potential for full administrative account takeover poses a severe risk to the integrity and confidentiality of the game collection management platform. With a CVSS score of 7.6, this vulnerability is classified as High severity, as an attacker with low privileges can gain complete control over the application, leading to unauthorized data access and total system compromise.

Immediate Action: Update RomM to version 4.4.1 or 4.4.1-beta.2 immediately to incorporate the necessary file validation and security patches.

Proactive Monitoring: Review application logs for suspicious file upload activity or unauthorized modifications to user account roles and permissions.

Compensating Controls: Implement a Web Application Firewall (WAF) to filter and block the upload of executable file types such as SVG or HTML that contain embedded JavaScript.

Public Exploit Available: Yes, an entry exists in ExploitDB.

Given the capability for complete account takeover, this vulnerability represents a significant security risk to any environment hosting RomM. IT administrators must prioritize the update to the patched versions to eliminate the underlying file upload and CSRF weaknesses. Failure to apply this patch leaves the application susceptible to malicious actors who may leverage existing public exploit code to compromise administrative access.