cve/2017/CVE-2017-9061.md

### [CVE-2017-9061](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9061)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

In WordPress before 4.7.5, a cross-site scripting (XSS) vulnerability exists when attempting to upload very large files, because the error message does not properly restrict presentation of the filename.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/0v3rride/Week-7
- https://github.com/ARPSyndicate/cvemon
- https://github.com/Afetter618/WordPress-PenTest
- https://github.com/DannyLi804/CodePath-Pentesting
- https://github.com/HarryMartin001/WordPress-vs.-Kali-Week-7-8
- https://github.com/JHChen3/web_security_week7
- https://github.com/NoahMarwitz/CodePath-Week-7
- https://github.com/StamEvmStudios/vulnerabilities
- https://github.com/akras14/codepath7
- https://github.com/bryanvnguyen/WordPress-PT
- https://github.com/dedpanguru/codepath_wordpress_assignment
- https://github.com/ethansam911/codepath_week_7_8
- https://github.com/ftruncale/Codepath-Week-7
- https://github.com/greenteas/week7-wp
- https://github.com/kjtlgoc/CodePath-Unit-7-8-WordPress-Pentesting
- https://github.com/mnmr1996/web-security
- https://github.com/mpai000/websecurity
- https://github.com/samuely4/Facebook-CodePath-CyberSecurity-Week-7-8-master
- https://github.com/seaunderwater/WordPress-Pentesting
- https://github.com/smfils1/Cybersecurity-WordPress-Pentesting
- https://github.com/theawkwardchild/WordPress-Pentesting
- https://github.com/vkril/Cybersecurity-Week-7-Project-WordPress-vs.-Kali
- https://github.com/yud121212/WordPress-PT
- https://github.com/zando1996/Week-7-Lab-CodePath