CVEs-PoC/2021/CVE-2021-24236.md

CVE-2021-24236

Description

The Imagements WordPress plugin through 1.2.5 allows images to be uploaded in comments, however only checks for the Content-Type in the request to forbid dangerous files. This allows unauthenticated attackers to upload arbitrary files by using a valid image Content-Type along with a PHP filename and code, leading to RCE.

POC

Reference

• https://wpscan.com/vulnerability/8f24e74f-60e3-4100-9ab2-ec31b9c9cdea
• https://wpscan.com/vulnerability/8f24e74f-60e3-4100-9ab2-ec31b9c9cdea

Github

• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/jinhuang1102/CVE-ID-Reports