CVE-2021-41163

This is a functional exploit PoC for CVE-2021-41163, targeting Discourse's theme import functionality to achieve remote code execution. The exploit crafts a malicious theme ZIP file with JavaScript, CSS, and template injection payloads, then uploads it via an authenticated admin session.

This is a functional exploit PoC for CVE-2021-41163, targeting Discourse's theme import functionality to achieve remote code execution. It includes multiple payload types (JavaScript, CSS, Handlebars, etc.) and attempts privilege escalation if admin access is not initially available.