Vulnerability · Published Oct 21, 2021 · Assigned by Wordfence

CVE-2021-39321Sassy Social Share 3.3.23 PHP Object Injection

High 8.8

In plain English

A high-severity incorrect authorization in Sassy Social Share from Sassy Social Share. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.0% (higher than 81% of all known vulnerabilities).

Severity (CVSS 3.1)8.8High

Exploit odds (30 days)2.0%top 18.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Version 3.3.23 of the Sassy Social Share WordPress plugin is vulnerable to PHP Object Injection via the wp_ajax_heateor_sss_import_config AJAX action due to deserialization of unvalidated user supplied inputs via the import_config function found in the ~/admin/class-sassy-social-share-admin.php file. This can be exploited by underprivileged authenticated users due to a missing capability check on the import_config function.

Affected products (as reported)

Vendor	Product	Versions
Sassy Social Share	Sassy Social Share	3.3.23

Weakness: CWE-863, CWE-502 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39321 x_refsource_MISC
https://www.wordfence.com/blog/2021/10/vulnerability-patched-in-sassy-social-share-plugin/ x_refsource_MISC
https://plugins.trac.wordpress.org/changeset/2600464/sassy-social-share/trunk/admin/class-sassy-social-share-admin.php x_refsource_MISC