Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-43871-WBCE-Arbitrary-File-Upload--XSS---Media — WBCE 1.6.1 is affected by File Upload - XSS vulnerability that allows attackers to upload a PDF file with a hidden XSS that when executed will launch the XSS pop-up | Kitploit
Tools/GitHubGitHub/sromanhu/cve-2023-43871-wbce-arbitrary-file-upload--xss---media
Phishing ToolsVulnerability AnalysisExploitationWeb Application ExploitationWeb Security
GitHubsromanhu/cve-2023-43871-wbce-arbitrary-file-upload--xss---media

CVE-2023-43871-WBCE-Arbitrary-File-Upload--XSS---Media

WBCE 1.6.1 is affected by File Upload - XSS vulnerability that allows attackers to upload a PDF file with a hidden XSS that when executed will launch the XSS pop-up

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
View Repository
2 years agoNot yet reviewed

WBCE File Upload XSS - WBCE v1.6.1

Author: (Sergio)

Description: File upload vulnerability in WBCE v.1.6.1 allows a local attacker to upload a pdf file with hidden XSS.

Attack Vectors: A vulnerability in Media file upload sanitation allows you to upload a PDF file with hidden XSS.

POC:

When logging into the panel, we will go to the "Media" section off General Menu.

XSS Pdf

We upload the PDF file with the hidden XSS and we see that we can execute it and the Reflected XSS appears.

XSS Pdf resultado


Additional Information:

http://www.cmsmadesimple.org/

https://cheatsheetseries.owasp.org/cheatsheets/File_Upload_Cheat_Sheet.html

Download Tool