PT-2021-16394 · WordPress · Wp Rss Aggregator

Krzysztof Zając · Published 2021-12-27 · Updated 2022-10-24 · CVE-2021-24988

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: WP RSS Aggregator versions prior to 4.19.3

Description: The issue is related to a Stored XSS problem. It occurs because data is not properly sanitised and escaped before being output in the System Info admin dashboard. This is due to the wprss dismiss addon notice AJAX action lacking authorisation and CSRF checks, allowing any authenticated user to call it and potentially set a malicious payload in the addon parameter.

Recommendations: For versions prior to 4.19.3, update to version 4.19.3 or later to resolve the issue.

Exploit

Fix

Missing Authorization

XSS

CSRF

Weakness Enumeration

CWE-862

CWE-79

CWE-352

Related Identifiers

CVE-2021-24988

Affected Products

Wp Rss Aggregator

References · 3

• 🔥 https://wpscan.com/vulnerability/0742483b-6314-451b-a63a-536fd1e14845 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-24988 · Security Note
• https://osv.dev/vulnerability/CVE-2021-24988 · Vendor Advisory