PT-2021-22562 · WordPress · Content Staging

Published 2021-10-21 · Updated 2021-10-28 · CVE-2021-39356

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Content Staging WordPress plugin versions up to and including 2.0.1

Description: The issue is due to insufficient input validation and escaping via several parameters that are echoed out via the ~/templates/settings.php file. This allows attackers with administrative user access to inject arbitrary web scripts. The problem affects multi-site installations where unfiltered html is disabled for administrators, and sites where unfiltered html is disabled.

Recommendations: For versions up to and including 2.0.1, update to a version higher than 2.0.1 to resolve the issue. As a temporary workaround, consider restricting access to the ~/templates/settings.php file and ensuring proper input validation and escaping for all parameters. Additionally, enabling unfiltered html for administrators in multi-site installations may help mitigate the risk, but this should be done with caution and careful consideration of the potential security implications.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-39356

Affected Products

Content Staging

References · 7

• 🔥 https://github.com/BigTiger2020/word-press/blob/main/Content%20Staging.md · Exploit
• https://osv.dev/vulnerability/CVE-2021-39356 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-39356 · Security Note
• https://t.me/cvenotify/22528 · Telegram Post
• https://plugins.trac.wordpress.org/browser/content-staging/trunk/templates/settings.php · Note
• https://wordfence.com/vulnerability-advisories/#CVE-2021-39356 · Note
• https://t.me/cibsecurity/30988 · Telegram Post