CVEs-PoC/2021/CVE-2021-30134.md

### [CVE-2021-30134](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30134)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)

### Description

php-mod/curl (a wrapper of the PHP cURL extension) before 2.3.2 allows XSS via the post_file_path_upload.php key parameter and the POST data to post_multidimensional.php.

### POC

#### Reference
- https://wpscan.com/vulnerability/0b547728-27d2-402e-ae17-90d539344ec7

#### Github
- https://github.com/ARPSyndicate/kenzer-templates