PT-2021-15969 · WordPress · Sign-Up Sheets

Ajay Sandipan Thorbole · Published 2021-07-12 · Updated 2021-07-15 · CVE-2021-24441

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sign-up Sheets WordPress plugin versions prior to 1.0.14

Description The issue concerns a CSV injection problem due to the lack of sanitization or validation of the Sheet title when generating the CSV for export.

Recommendations For versions prior to 1.0.14, update to version 1.0.14 or later to resolve the issue.

Exploit

Fix

RCE

Weakness Enumeration

CWE-1236

Related Identifiers

CVE-2021-24441

Affected Products

Sign-Up Sheets

References · 3

• 🔥 https://wpscan.com/vulnerability/ec9292b1-5cbd-4332-bdb6-2351c94f5ac6 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-24441 · Security Note
• https://osv.dev/vulnerability/CVE-2021-24441 · Vendor Advisory