CVE-2021-24554

HIGHNuclei

Paytm - Donation Plugin <= 1.3.2 - Authenticated (admin+) SQL Injection

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2021-24554 has a selected CVSS score of 7.2 (high); EIP currently links 1 Nuclei template.

Description

The Paytm – Donation Plugin WordPress plugin through 1.3.2 does not sanitise, validate or escape the id GET parameter before using it in a SQL statement when deleting donations, leading to an authenticated SQL injection issue

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

Paytm – Donation Plugin

CVE List1.3.2 to ≤ 1.3.2affected

Nuclei templates

1
ProjectDiscoveryHIGHWordPress Paytm Donation <=1.3.2 - Authenticated SQL InjectionCVSS 7.2

WordPress Paytm Donation plugin through 1.3.2 is susceptible to authenticated SQL injection. The plugin does not sanitize, validate, or escape the id GET parameter before using it in a SQL statement when deleting donations. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

Impact

Successful exploitation of this vulnerability could allow an authenticated attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data manipulation.

Remediation

Update to the latest version of the WordPress Paytm Donation plugin (version > 1.3.2) to mitigate the vulnerability.

WeaknessesCWE-89
Authorstheamanrawat
Template tagstime-based-sqlicvecve2021sqliwordpresswp-pluginwpwp-paytm-paywpscanfreelancetoindiavuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:freelancetoindia:paytm-pay:*:*:*:*:*:wordpress:*:*
https://wpscan.com/vulnerability/f2842ac8-76fa-4490-aa0c-5f2b07ecf2ad https://wordpress.org/plugins/wp-paytm-pay/ https://codevigilant.com/disclosure/2021/wp-plugin-wp-paytm-pay/ https://nvd.nist.gov/vuln/detail/CVE-2021-24554 https://github.com/ARPSyndicate/cvemon

Source: ProjectDiscovery

References

3