Cross-Site Scripting in PivotX CMS 3.0.0 RC3 subtitle field

This repository contains a single Metasploit module (modules/exploits/linux/http/pivotx_index_php_overwrite.rb) targeting PivotX CMS (version 3.0.0-rc3 and earlier) for remote code execution (RCE). The exploit leverages the ability of an authenticated admin user to edit PHP files via the web interface, specifically overwriting index.php with a malicious PHP payload. The module performs authentication, locates the working directory, retrieves and stores the original index.php content, injects the payload, triggers its execution, and attempts to restore the original file content. The default payload is a PHP Meterpreter reverse shell, but any arbitrary PHP code can be executed. The attack is performed over HTTP(S) endpoints exposed by the target PivotX installation. The module is fully integrated into the Metasploit framework, weaponized, and provides reliable RCE with post-exploitation cleanup.