Add CVE-2024-7094 - JS Help Desk wordpress plugin Remote Code Execution

[flyingllama87]

Template / PR Information

The JS Help Desk plugin for WordPress is vulnerable to PHP Code Injection leading to Remote Code Execution in all versions up to, and including, 2.8.6 via the 'storeTheme' function. This template tests for the vulnerability via the plugin's readme.txt file which includes a changelog for the currently installed version.

• Added CVE-2024-7094

• References:

  • https://nvd.nist.gov/vuln/detail/CVE-2024-7094
  • GHSA-344g-jvx4-773r
  • https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/js-support-ticket/js-help-desk-the-ultimate-help-desk-support-plugin-286-unauthenticated-php-code-injection-to-remote-code-execution

Template Validation

I've validated this template locally?

• YES
• NO

Additional Details (leave it blank if not applicable)

shodan-query: http.html:"/wp-content/plugins/js-support-ticket"
fofa-query: body="/wp-content/plugins/js-support-ticket"

Additional References:

• Nuclei Template Creation Guideline
• Nuclei Template Matcher Guideline
• Nuclei Template Contribution Guideline
• PD-Community Discord server

[ritikchaddha]

Hello @flyingllama87,
In this repository, we aim to add templates with complete POCs. However, this particular template lacks a complete POC and relies solely on version detection. Consequently, we have chosen to close this pull request. Nonetheless, please feel free to submit another pull request with a full POC.