Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2024-6651 — POC (XSS) -> CVE-2024-6651 | Kitploit
Tools/GitHubGitHub/yup-ivan/cve-2024-6651
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & Education
GitHubyup-ivan/cve-2024-6651

CVE-2024-6651

POC (XSS) -> CVE-2024-6651

View Repository
17 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2024-6651

POC (XSS) -> CVE-2024-6651

Functional PoC for vulnerability CVE-2024-6651, which affects the plugin WP File Upload < 4.24.8, allowing Reflected Cross-Site Scripting (XSS) in WordPress.

📌 Description

This vulnerability allows arbitrary JavaScript code injection via an unsanitized parameter in the admin panel of the WP File Upload plugin.

The attack occurs through the dir parameter in the File Browser functionality, allowing JavaScript execution in the browser of an authenticated user (typically an administrator).

⚠️ Exclusive use for educational purposes and authorized environments.

🧠 Vulnerability Type

Reflected XSS

🧰 Requirements

  • Vulnerable WordPress with WP File Upload < 4.24.8
  • XSS Payload

🚀 Installation and Usage

root@kitploit:~
git clone https://github.com/yup-Ivan/CVE-2024-6651.git
cat payload.txt
Download Tool