
XSS2Shell: From Zero to Shell on WordPress
A hands-on walkthrough of a pre-authentication XSS chain that can escalate to remote code execution on WordPress Core, demonstrated on a local Docker lab.
Technical write-ups from the CyberTested research team: vulnerability chains, Core bugs, and the lessons they teach about how severity really works.

A hands-on walkthrough of a pre-authentication XSS chain that can escalate to remote code execution on WordPress Core, demonstrated on a local Docker lab.