Lucene search
Brandon RoldanWPVDB-ID:B71F53D7-6B9E-458C-8754-576AD2A52F7DHistoryJan 05, 2022 - 12:00 a.m.
SupportCandy < 2.2.7 - Arbitrary Ticket Deletion via CSRF
2022-01-0500:00:00
Brandon Roldan
wpscan.com
7
0.001 Low
EPSS
Percentile
26.5%
The plugin does not have CRSF check in its wpsc_tickets AJAX action, which could allow attackers to make a logged in admin call it and delete arbitrary tickets via the set_delete_permanently_bulk_ticket setting_action.
PoC
| CPE | Name | Operator | Version |
|---|---|---|---|
| supportcandy | lt | 2.2.5 |
Related
cvelist
cvelist
CVE-2021-24843 SupportCandy < 2.2.7 - Arbitrary Ticket Deletion via CSRF
2022-02-07 15:47:10
cve
cve
CVE-2021-24843
2022-02-07 16:15:42
nvd
nvd
CVE-2021-24843
2022-02-07 16:15:42
wpexploit
wpexploit
SupportCandy < 2.2.7 - Arbitrary Ticket Deletion via CSRF
2022-01-05 00:00:00
patchstack
patchstack
prion
prion
Design/Logic Flaw
2022-02-07 16:15:00