PT-2021-16015 · WordPress · Handsome Testimonials & Reviews

Shreya Pohekar · Published 2021-08-02 · Updated 2021-08-10 · CVE-2021-24492

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Handsome Testimonials & Reviews WordPress plugin versions prior to 2.1.1

Description The issue arises from the hndtst action instance callback AJAX call in the Handsome Testimonials & Reviews WordPress plugin, which is accessible to any authenticated users. It fails to sanitise, validate, or escape the hndtst previewShortcodeInstanceId POST parameter before using it in a SQL statement, leading to an SQL Injection issue.

Recommendations For versions prior to 2.1.1, update to version 2.1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the hndtst action instance callback AJAX call to minimize the risk of exploitation. Avoid using the hndtst previewShortcodeInstanceId parameter in the affected AJAX endpoint until the issue is resolved.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2021-24492

Affected Products

Handsome Testimonials & Reviews

References · 5

• 🔥 https://wpscan.com/vulnerability/42760007-0e59-4d45-8d64-86bc0b8dacea · Exploit
• 🔥 https://codevigilant.com/disclosure/2021/wp-plugin-handsome-testimonials · Exploit
• https://osv.dev/vulnerability/CVE-2021-24492 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-24492 · Security Note
• https://t.me/cibsecurity/26660 · Telegram Post