The Scroll Baner WordPress plugin through 1.0 does not have CSRF check in place when saving its settings, nor perform any sanitisation, escaping or validation on them. This could allow attackers to make logged in admin change them and could lead to RCE (via a file upload) as well as XSS
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: WPScan
Published: 2021-10-18T13:45:52
Updated: 2024-08-03T19:35:20.367Z
Reserved: 2021-01-14T00:00:00
Link: CVE-2021-24642
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-10-18T14:15:09.437
Modified: 2024-11-21T05:53:28.530
Link: CVE-2021-24642
Redhat
No data.