PT-2021-16070 · WordPress · Broken-Link-Manager

Shreya Pohekar · Published 2021-08-23 · Updated 2021-08-26 · CVE-2021-24550

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Broken Link Manager WordPress plugin versions 0.6.5 and earlier

Description The issue arises from the plugin not sanitizing, validating, or escaping the url GET parameter before using it in a SQL statement when retrieving a URL to edit. This leads to an authenticated SQL injection issue.

Recommendations For versions 0.6.5 and earlier, update to a version that addresses this issue. As a temporary workaround, consider restricting access to the SQL statement that uses the url GET parameter until a patch is available. Avoid using the url parameter in the affected SQL statement until the issue is resolved.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2021-24550

Affected Products

Broken-Link-Manager

References · 6

• 🔥 https://codevigilant.com/disclosure/2021/wp-plugin-broken-link-manager · Exploit
• 🔥 https://wpscan.com/vulnerability/1bf65448-689c-474d-a566-c9b6797d3e4a · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-24550 · Security Note
• https://osv.dev/vulnerability/CVE-2021-24550 · Vendor Advisory
• https://t.me/cvenotify/20208 · Telegram Post
• https://t.me/cibsecurity/27681 · Telegram Post