Lucene search
PRIOn knowledge basePRION:CVE-2021-24890HistorySep 26, 2022 - 1:15 p.m.
Cross site request forgery (csrf)
2022-09-2613:15:00
PRIOn knowledge base
www.prio-n.com
1
wordpress
plugin
csrf
vulnerability
nvd
The Scripts Organizer WordPress plugin before 3.0 does not have capability and CSRF checks in the saveScript AJAX action, available to both unauthenticated and authenticated users, and does not validate user input in any way, which could allow unauthenticated users to put arbitrary PHP code in a file
| CPE | Name | Operator | Version |
|---|---|---|---|
| scripts_organizer | lt | 3.0 |
Related
cvelist
cvelist
cnvd
cnvd
WordPress Scripts Organizer Arbitrary File Upload Vulnerability
2022-09-28 00:00:00
wpexploit
wpexploit
Scripts Organizer < 3.0 - Unauthenticated Arbitrary File Upload
2022-09-05 00:00:00
cve
cve
CVE-2021-24890
2022-09-26 13:15:09
nvd
nvd
CVE-2021-24890
2022-09-26 13:15:09
wpvulndb
wpvulndb
Scripts Organizer < 3.0 - Unauthenticated Arbitrary File Upload
2022-09-05 00:00:00
patchstack
patchstack