CVE-2022-41978

🗓️ 09 Nov 2022 15:46:23Reported by PatchstackType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 59 Views🌐 WEB

CVE-2022-41978 Auth. (subscriber+) Arbitrary Options Update vulnerability in Zoho CRM Lead Magnet plugin <= 1.7.5.

Reporter	Title	Published	Views	Family All 10
CNNVD	WordPress Plugin Zoho CRM Lead Magnet 权限许可和访问控制问题漏洞	9 Nov 202200:00	–	cnnvd
Cvelist	CVE-2022-41978 WordPress Zoho CRM Lead Magnet plugin <= 1.7.5.8 - Auth. Arbitrary Options Update vulnerability	9 Nov 202215:46	–	cvelist
EUVD	EUVD-2022-45082	3 Oct 202520:07	–	euvd
NVD	CVE-2022-41978	9 Nov 202216:15	–	nvd
Patchstack	WordPress Zoho CRM Lead Magnet plugin <= 1.7.6.1 - Auth. Arbitrary Options Update vulnerability	27 Oct 202200:00	–	patchstack
Prion	Code injection	9 Nov 202216:15	–	prion
Positive Technologies	PT-2022-26197 · Zoho · Zoho Crm Lead Magnet Plugin	9 Nov 202200:00	–	ptsecurity
Vulnrichment	CVE-2022-41978 WordPress Zoho CRM Lead Magnet plugin <= 1.7.5.8 - Auth. Arbitrary Options Update vulnerability	9 Nov 202215:46	–	vulnrichment
wpexploit	Zoho CRM Lead Magnet < 1.7.6.2 - Subscriber+ Arbitrary Options Update	27 Oct 202200:00	–	wpexploit
WPVulnDB	Zoho CRM Lead Magnet < 1.7.6.2 - Subscriber+ Arbitrary Options Update	27 Oct 202200:00	–	wpvulndb

NVD

Vulners

Node

zohocorp zoho_crm_lead_magnetRange≤1.7.5.8wordpress

[
  {
    "product": "Zoho CRM Lead Magnet (WordPress plugin)",
    "vendor": "Zoho CRM",
    "versions": [
      {
        "lessThanOrEqual": "1.7.5.8",
        "status": "affected",
        "version": "<= 1.7.5.8",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wordpress	www.wordpress.org/plugins/zoho-crm-forms/
patchstack	www.patchstack.com/database/vulnerability/zoho-crm-forms/wordpress-zoho-crm-lead-magnet-plugin-1-7-5-6-auth-arbitrary-options-update-vulnerability

Parameter	Position	Path	Description	CWE
tp_title_key	query param	/wp-admin/admin-ajax.php?action=zcf_save_contact_form_title&nonce=&tp_title_key=blogname&tp_title_val=Changed%20by%20Subscriber	Arbitrary options update via unauthenticated/insufficiently protected AJAX action allowing modification of blog options.	CWE-264
tp_title_val	query param	/wp-admin/admin-ajax.php?action=zcf_save_contact_form_title&nonce=&tp_title_key=blogname&tp_title_val=Changed%20by%20Subscriber	Arbitrary options update via unauthenticated/insufficiently protected AJAX action allowing modification of blog options.	CWE-264
shortcode	query param	/wp-admin/admin-ajax.php?action=mainActionscrmForms&operation=NoFieldOperation&doaction=SaveFormSettings&shortcode=blogname&thirdparty_title=Owned	Arbitrary options update via POST body in AJAX action enabling update of plugin/blog options.	CWE-264
thirdparty_title	query param	/wp-admin/admin-ajax.php?action=mainActionscrmForms&operation=NoFieldOperation&doaction=SaveFormSettings&shortcode=blogname&thirdparty_title=Owned	Arbitrary options update via POST body in AJAX action enabling update of plugin/blog options.	CWE-264