EDB-50304

PoC

WordPress 5.7 - 'Media Library' XML External Entity Injection (XXE) (Authenticated)

view exploit source exploit_dbtype webappsauthor David Utónpublished 2021-09-20catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2021-29447US	medium6.5	85.7% (100th)	Exploit	2021-04-15
Wordpress is an open source CMS. A user with the ability to upload files (like an Author) can exploit an XML parsing issue in the Media Library leading to XXE attacks. This require…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.