CVE-2019-9978 PoC — WordPress social-warfare插件跨站脚本漏洞

Readme

# CVE-2019-9978

### WordPress Plugin Social Warfare RCE Vulnerability < 3.5.3 🐞

#### Minimal simulated from vulnerable plugin and exploit it 🥰

## Installation Of Vulnerable Plugin

### Install dependencies:
```shell
docker-compose build
```
### Start vulnerable and attacker server containers
```shell
docker-compose up
```
or

```shell
docker-compose up -d
```

![docker-compose up -d](./images/1.png)

### Stop servers
```shell
docker-compose down
```

![docker-compose down](./images/2.png)

## Exploit

### Install exploit dependencies:
```shell
pip install -r requirements.txt
```

### Execute:
```shell
python3 exploit.py
```

![exploit](3.png)

### Enjoy 💀

File Snapshot

Remarks