CVE-2024-6386
CRITICALWPML < 4.6.13 - Authenticated Remote Code Execution via Twig Server-Side Template Injection
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2024-6386. PoCs published by argendo, bananoname.
AI-analyzed exploit summary This repository contains a functional proof-of-concept exploit for CVE-2024-6386, demonstrating a Server-Side Template Injection (SSTI) vulnerability in WPML that leads to Remote Code Execution (RCE). The exploit uses Selenium to automate the insertion of a malicious Twig template payload into a WordPress post, bypassing quote encoding restrictions.
Description
The WPML plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.6.12 via Twig Server-Side Template Injection. This is due to missing input validation and sanitization on the render function. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server.
Exploits (2)
This repository contains a functional proof-of-concept exploit for CVE-2024-6386, demonstrating a Server-Side Template Injection (SSTI) vulnerability in WPML that leads to Remote Code Execution (RCE). The exploit uses Selenium to automate the insertion of a malicious Twig template payload into a WordPress post, bypassing quote encoding restrictions.
This repository provides a detailed technical analysis of CVE-2024-6386, a Server-Side Template Injection (SSTI) vulnerability in WPML Multilingual CMS leading to Remote Code Execution (RCE). It includes root cause analysis, payload examples, bypass techniques, and mitigation strategies.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H