Security Research
CVE-2024-10793 WP Activity Log: Stored XSS to RCE in the Audit Page
Thinking
2024-12-25
3 min read
Research Dossier
#Vulnerability Analysis#Code Audit#Web Security
WP Activity Log writes user behavior into the log page with zero sanitization. Once the stored XSS fires, the attacker grabs the admin nonce and uploads a PHP webshell — the entire chain goes from a single log entry all the way to RCE.
Unlock to view this content.
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