Vulnerability CVE-2021-24208


Published: 2021-04-05

Description:
The editor of the WP Page Builder WordPress plugin before 1.2.4 allows lower-privileged users to insert unfiltered HTML, including JavaScript, into pages via the ??Raw HTML? widget and the ??Custom HTML? widgets (though the custom HTML widget requires sending a crafted request - it appears that this widget uses some form of client side validation but not server side validation), all of which are added via the ??page_builder_data? parameter when performing the ??wppb_page_save? AJAX action. It is also possible to insert malicious JavaScript via the ??wppb_page_css? parameter (this can be done by closing out the style tag and opening a script tag) when performing the ??wppb_page_save? AJAX action.

Type:

CWE-79

(Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

CVSS2 => (AV:N/AC:M/Au:S/C:N/I:P/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
3.5/10
2.9/10
6.8/10
Exploit range
Attack complexity
Authentication
Remote
Medium
Single time
Confidentiality impact
Integrity impact
Availability impact
None
Partial
None
Affected software
Themeum -> Wp page builder 

 References:
https://wpscan.com/vulnerability/c20e243d-b0de-4ae5-9a0d-b9d02c9b8141
https://www.themeum.com/wp-page-builder-updated-v1-2-4/

Copyright 2022, cxsecurity.com

 

Back to Top