yup-Ivan/CVE-2024-6651

GitHubRepository PoCWriteup

PoC files

2 files

File viewing is interactive and short-lived. Downloads are password-protected ZIP archives using password eip.

GitHub
Analysisdeepseek-v4-pro:cloud ·

Technical assessment

The artifact is a README file describing CVE-2024-6651, a Reflected XSS vulnerability in the WordPress File Upload plugin. It provides a vulnerability description, prerequisites, and installation instructions, but does not include any exploit or scanner code.

Backdoor review

No backdoor observed in reviewed code

The supplied evidence consists solely of a README.md file describing a proof-of-concept for CVE-2024-6651, a reflected XSS vulnerability in the WordPress File Upload plugin. The file contains no executable code, no obfuscated content, and no instructions for the reviewer to perform any action beyond reading the documentation. It describes the vulnerability, its target, and educational intent. No backdoor, deceptive payload, or concealed harmful behavior is present in the reviewed text.

ClassificationWriteup
Model confidence95%
AuthenticationRequired
LanguagesSpanish
Target softwareWordPress File Upload plugin
Attack typesReflected XSS
Evidence & reasoningClassification basis · observed behavior · safety review
Technical evidence

Classification basis and observed behavior

Classification basis

The artifact is a README file that provides a technical description of the CVE-2024-6651 vulnerability, including its type, affected component, and attack vector. It does not contain any executable code, scanner logic, or proof-of-concept exploit. The file references a 'payload.txt' but it is not included in the evidence packet.

README.md:1-37

Requirements

  • Vulnerable WordPress File Upload plugin version < 4.24.8README.md:28
  • A crafted XSS payloadREADME.md:29

Observed behavior

  • The README describes a Reflected XSS vulnerability in the WordPress File Upload plugin's admin panel via the 'dir' parameter in the File Browser functionality.README.md:11-14
Safety-review evidence

Behaviors behind the backdoor verdict

Observables

Vulnerability Description
CVE-2024-6651: Reflected XSS in WordPress File Upload plugin < 4.24.8 via 'dir' parameter in File Browser functionality.The README describes a standard proof-of-concept for a known CVE. It does not instruct the reviewer to execute any code or perform any action that would compromise their own system.README.md:1-15
Usage Disclaimer
⚠️ Uso exclusivo para fines educativos y entornos autorizadosThe file includes a standard educational-use disclaimer, which is common in PoC repositories and does not indicate malicious intent toward the reviewer.README.md:16
Review boundaries

What the analysis did not establish

  • The evidence packet contains only the README.md file; the referenced 'payload.txt' file is not included, so its contents cannot be analyzed.
  • The analysis is based solely on the description in the README; no source code or executable exploit is present.
  • The file 'payload.txt' is listed in the artifact inventory but its content is not included in the evidence packet. Its nature (e.g., a harmless XSS payload or something else) cannot be verified from the supplied evidence.
  • The review is based solely on the text of README.md; no other files or repository metadata were analyzed.
Model interpretation

This review is limited to the supplied PoC code and context. It does not assert that the code works or is safe to execute.

Linked vulnerabilities

1