Lucene search

WPScanCVE-2021-24143

HistoryMar 18, 2021 - 3:15 p.m.

CVE-2021-24143

2021-03-1815:15:15

CWE-89

WPScan

web.nvd.nist.gov

cve-2021-24143

accesspress social icons

sql injection

unvalidated input

nvd

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

37.0%

JSON

Unvalidated input in the AccessPress Social Icons plugin, versions before 1.8.1, did not sanitise its widget attribute, allowing accounts with post permission, such as author, to perform SQL injections.

Affected configurations

Nvd

Vulners

Node

accesspressthemesaccesspress_social_iconsRange<1.8.1wordpress

VendorProductVersionCPE
accesspressthemesaccesspress_social_icons*cpe:2.3:a:accesspressthemes:accesspress_social_icons:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
accesspressthemes	accesspress_social_icons	*	cpe:2.3:a:accesspressthemes:accesspress_social_icons::::::wordpress::*

CNA Affected

[
  {
    "product": "AccessPress Social Icons",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "1.8.1",
        "status": "affected",
        "version": "1.8.1",
        "versionType": "custom"
      }
    ]
  }
]

References

wpscan.com/vulnerability/02c5e10c-1ac7-447e-8ae5-b6d251be750b

Social References

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

37.0%

JSON

Related for CVE-2021-24143