CVE-2021-24284

CRITICALNuclei

Kaswara Modern VC Addons <= 3.0.1 - Unauthenticated Arbitrary File Upload

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2021-24284 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

The Kaswara Modern VC Addons WordPress plugin through 3.0.1 allows unauthenticated arbitrary file upload via the 'uploadFontIcon' AJAX action. The supplied zipfile being unzipped in the wp-content/uploads/kaswara/fonts_icon directory with no checks for malicious files such as PHP.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Dec 24, 2023 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

Affected products and versions

2
ProductSourceVersion range

Kaswara Modern VC Addons

Browse SayenThemes / Kaswara Modern VC Addons
CVE List3.0.1 to ≤ 3.0.1affected

kaswara

Browse kaswara_project / kaswara
VulnCheckVersion data not supplied

Nuclei templates

1
ProjectDiscoveryCRITICALWordPress Kaswara Modern VC Addons <=3.0.1 - Arbitrary File UploadCVSS 9.8

WordPress Kaswara Modern VC Addons plugin through 3.0.1 is susceptible to an arbitrary file upload. The plugin allows unauthenticated arbitrary file upload via the uploadFontIcon AJAX action, which can be used to obtain code execution. The supplied zipfile is unzipped in the wp-content/uploads/kaswara/fonts_icon directory with no checks for malicious files such as PHP.

Impact

Successful exploitation of this vulnerability can result in unauthorized remote code execution on the affected WordPress website.

Remediation

Update to the latest version of Kaswara Modern VC Addons plugin (>=3.0.2) to mitigate this vulnerability.

WeaknessesCWE-434
Authorslamscun, pussycat0x, pdteam
Template tagscve2021cveintrusiveunauthfileuploadwpscanwordpresswp-pluginrcewpkaswara_projectvkev
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:kaswara_project:kaswara:*:*:*:*:*:wordpress:*:*
https://wpscan.com/vulnerability/8d66e338-a88f-4610-8d12-43e8be2da8c5 https://github.com/advisories/GHSA-wqvg-8q49-hjc7 https://www.wordfence.com/blog/2021/04/psa-remove-kaswara-modern-wpbakery-page-builder-addons-plugin-immediately/ https://www.waltermairena.net/en/2021/04/25/0-day-vulnerability-in-the-plugin-kaswara-modern-vc-addons-plugin-what-can-i-do/ https://lifeinhex.com/kaswara-exploit-or-how-much-wordfence-cares-about-user-security/ https://nvd.nist.gov/vuln/detail/CVE-2021-24284

Source: ProjectDiscovery

References

4