Vulnerability · Published May 5, 2021 · Assigned by WPScan
CVE-2021-24252Event Banner <= 1.3 - Arbitrary File Upload to RCE
High 7.2
In plain English
A high-severity unrestricted file upload in Event Banner from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.7% (higher than 77% of all known vulnerabilities).
Severity (CVSS NVD)7.2High
Exploit odds (30 days)1.7%top 23.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The Event Banner WordPress plugin through 1.3 does not verify the uploaded image file, allowing admin accounts to upload arbitrary files, such as .exe, .php, or others executable, leading to RCE. Due to the lack of CSRF check, the issue can also be used via such vector to achieve the same result, or via a LFI as authorisation checks are missing (but would require WP to be loaded)
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | Event Banner | 1.3 – through 1.3 |
Weakness: CWE-434
References
- https://wpscan.com/vulnerability/91e81c6d-f24d-4f87-bc13-746715af8f7c x_refsource_CONFIRM
- https://github.com/jinhuang1102/CVE-ID-Reports/blob/master/Event%20Banner.md x_refsource_MISC