Exploitation Summary
EIP tracks 2 public exploits for CVE-2023-4636. PoCs published by Ap0dexMe0, ThatNotEasy.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2023-4636, targeting WordPress with default Imagick to achieve unauthenticated remote code execution. The exploit generates polyglot PNG/PHP and SVG/MSL files to bypass security measures and execute arbitrary code.
Description
The WordPress File Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
Exploits (2)
This repository contains a functional exploit for CVE-2023-4636, targeting WordPress with default Imagick to achieve unauthenticated remote code execution. The exploit generates polyglot PNG/PHP and SVG/MSL files to bypass security measures and execute arbitrary code.
This repository contains a functional exploit for CVE-2023-4634, targeting WordPress with default Imagick configurations. The exploit generates polyglot PNG/PHP and SVG/MSL files to achieve unauthenticated remote code execution by leveraging ImageMagick's file handling vulnerabilities.
References (3)
Scores
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N