Vulnerability · Published Nov 8, 2021 · Assigned by WPScan
CVE-2021-24626Chameleon CSS <= 1.2 - Subscriber+ SQL Injection
High 8.8
In plain English
A high-severity SQL injection in Chameleon CSS from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 55% of all known vulnerabilities).
Severity (CVSS NVD)8.8High
Exploit odds (30 days)0.7%top 45.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The Chameleon CSS WordPress plugin through 1.2 does not have any CSRF and capability checks in all its AJAX calls, allowing any authenticated user, such as subscriber to call them and perform unauthorised actions. One of AJAX call, remove_css, also does not sanitise or escape the css_id POST parameter before using it in a SQL statement, leading to a SQL Injection
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | Chameleon CSS | 1.2 – through 1.2 |
Weakness: CWE-89, CWE-352
References
- https://wpscan.com/vulnerability/06cb6c14-99b8-45b6-be2e-f4dcca8a4165 x_refsource_MISC
- https://codevigilant.com/disclosure/2021/wp-plugin-chameleon-css/ x_refsource_MISC