PT-2022-9492 · WordPress · Scripts Organizer

Ovidiu Maghetiu · Published 2022-09-26 · Updated 2022-09-28 · CVE-2021-24890

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Scripts Organizer WordPress plugin versions prior to 3.0

Description The issue concerns the lack of capability and CSRF checks in the saveScript AJAX action, which is accessible to both unauthenticated and authenticated users. Additionally, the plugin does not validate user input, potentially allowing unauthenticated users to insert arbitrary PHP code into a file.

Recommendations For versions prior to 3.0, update to version 3.0 or later to resolve the issue. As a temporary workaround, consider disabling the saveScript AJAX action until a patch is available. Restrict access to the Scripts Organizer WordPress plugin to minimize the risk of exploitation. Avoid using the plugin until the issue is resolved.

Exploit

Fix

Missing Authorization

CSRF

Weakness Enumeration

CWE-862

CWE-352

Related Identifiers

CVE-2021-24890

Affected Products

Scripts Organizer

References · 4

• 🔥 https://wpscan.com/vulnerability/f3b450d2-84ce-4c13-ad6a-b60785dee7e7 · Exploit
• https://osv.dev/vulnerability/CVE-2021-24890 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-24890 · Security Note
• https://dplugins.com/products/scripts-organizer · Note