PT-2022-9524 · WordPress · Code Insight
Krzysztof Zając
·
Published
2022-03-14
·
Updated
2022-03-20
·
CVE-2021-24950
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Insight Core WordPress plugin versions prior to 1.1
Description
The issue concerns the lack of authorization and CSRF checks in the
insight customizer options import function, which is accessible to any authenticated user. Additionally, it fails to validate user input before passing it to unserialize(), and does not sanitize and escape the input before outputting it in the response. This could allow users with a role as low as Subscriber to perform PHP Object Injection, as well as Stored Cross-Site Scripting attacks.Recommendations
For Insight Core WordPress plugin versions prior to 1.1, update to version 1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the
insight customizer options import function to minimize the risk of exploitation.Exploit
Fix
Missing Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Code Insight