PT-2022-9543 · WordPress · Use Any Font | Custom Font Uploader

Krzysztof Zając · Published 2022-02-28 · Updated 2022-10-24 · CVE-2021-24977

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Use Any Font | Custom Font Uploader WordPress plugin versions prior to 6.2.1

Description The issue allows unauthenticated users to send arbitrary CSS, which will be processed by the frontend for all users. This is due to the lack of authorization checks when assigning a font. Additionally, the lack of sanitization and escaping in the backend could lead to Stored XSS issues.

Recommendations For versions prior to 6.2.1, update to version 6.2.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the font assignment feature to authenticated and authorized users until the update is applied.

Exploit

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2021-24977

Affected Products

Use Any Font | Custom Font Uploader

References · 3

• 🔥 https://wpscan.com/vulnerability/739831e3-cdfb-4a22-9abf-6c594d7e3d75 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-24977 · Security Note
• https://osv.dev/vulnerability/CVE-2021-24977 · Vendor Advisory