WooCommerce Media Library Folders & File Manager Authenticated Stored XSS (Admin)

Vulnerability Details: WooCommerce Media Library File Upload Vulnerability Vulnerability Overview Vulnerability Name: Arbitrary File Upload Vulnerability in WooCommerce Media Library Folders & File Manager – Version 5.5.0 Vulnerability Type: Unrestricted File Upload Risk Level: High (CVSS Score 8.8, Severity: High) Affected Component: WooCommerce Media Library Folders & File Manager plugin Vulnerability Description: In version 5.5.0, the plugin lacks effective validation for the type and name of uploaded files. Attackers can craft specific requests to upload executable files (e.g., .php), thereby executing arbitrary code on the server. Scope of Impact Affected Versions: WooCommerce Media Library Folders & File Manager ≤ 5.5.0 Affected Environments: All WordPress sites with the plugin installed at versions prior to 5.5.1 Attack Vector: Network Prerequisites: The attacker must possess "Editor" or higher privileges (e.g., Admin, Editor roles) Remediation Plugin Upgrade: Upgrade WooCommerce Media Library Folders & File Manager to version 5.5.1 or higher Temporary Mitigation Measures: - Restrict the usage permissions of the plugin, granting access only to necessary personnel - Configure a file type whitelist at the web server level (e.g., allowing only .jpg, .png, .pdf, etc.) - Enable WAF rules to intercept suspicious file upload requests POC / Exploit Code > Note: The above POC sends the action via the endpoint, uploading a PHP file containing . If the upload is successful, accessing that file allows for arbitrary code execution.

Goal Reached Thanks to every supporter — we hit 100%!

WooCommerce Media Library Folders & File Manager Authenticated Stored XSS (Admin)

More from this source