Vulnerability · Published Sep 26, 2022 · Assigned by WPScan
CVE-2021-24890Scripts Organizer < 3.0 - Unauthenticated Arbitrary File Upload
High 8.8
In plain English
A high-severity missing authorization in scripts-organizer from Unknown. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 48% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.6%top 51.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
The Scripts Organizer WordPress plugin before 3.0 does not have capability and CSRF checks in the saveScript AJAX action, available to both unauthenticated and authenticated users, and does not validate user input in any way, which could allow unauthenticated users to put arbitrary PHP code in a file
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | scripts-organizer | 3.0 – before 3.0 |
Weakness: CWE-862, CWE-352 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References
- https://wpscan.com/vulnerability/f3b450d2-84ce-4c13-ad6a-b60785dee7e7 x_refsource_CONFIRM
- https://dplugins.com/products/scripts-organizer/ x_refsource_MISC