PT-2021-15885 · WordPress · This Gallery From Files

Satyender Yadav · Published 2021-06-14 · Updated 2022-11-09 · CVE-2021-24349

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions This Gallery from files WordPress plugin versions 1.6.0 and earlier

Description The issue arises from the improper sanitization of filenames before being output in an error message when they have an invalid extension, leading to a reflected Cross-Site Scripting issue. Due to the lack of CSRF check, the attack could also be performed via such vector.

Recommendations For versions 1.6.0 and earlier, update to a version that properly sanitizes filenames and includes a CSRF check to prevent reflected Cross-Site Scripting issues. As a temporary workaround, consider disabling the image upload functionality until a patch is available. Restrict access to the error message output to minimize the risk of exploitation.

Exploit

Fix

XSS

CSRF

Weakness Enumeration

CWE-79

CWE-352

Related Identifiers

CVE-2021-24349

Affected Products

This Gallery From Files

References · 7

• 🔥 https://wpscan.com/vulnerability/6bb4eb71-d702-4732-b01f-b723077d66ca · Exploit
• https://osv.dev/vulnerability/CVE-2021-24349 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-24349 · Security Note
• https://t.me/cvenotify/37341 · Telegram Post
• https://t.me/cvenotify/16254 · Telegram Post
• https://t.me/cibsecurity/25436 · Telegram Post
• https://t.me/cvenotify/16605 · Telegram Post