github.com
https://github.com/podlove/podlove-publisher/commit/aa8a343a2e2333b34a422f801adee09b020c6d76 CVE-2021-24666
CRITICALNuclei
Podlove Podcast Publisher < 3.5.6 - Unauthenticated SQL Injection
Record summary
CVE-2021-24666 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.
Description
The Podlove Podcast Publisher WordPress plugin before 3.5.6 contains a 'Social & Donations' module (not activated by default), which adds the rest route '/services/contributor/(?P<id>[\d]+), takes an 'id' and 'category' parameters as arguments. Both parameters can be used for the SQLi.
Description source: CVE List
Exploitation context
Known exploitation
- VulnCheck KEV
- Listed · Jan 21, 2025 · VulnCheck
- Reported exploitation
- Observed · VulnCheck
Available material
- Nuclei templates
- 1
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
Podlove Podcast Publisher | CVE List | 3.5.6 to < 3.5.6 | affected |
podlove_podcast_publisherBrowse podlove / podlove_podcast_publisher | VulnCheck | Version data not supplied | |
Nuclei templates
1ProjectDiscoveryCRITICALWordPress Podlove Podcast Publisher <3.5.6 - SQL InjectionCVSS 9.8
WordPress Podlove Podcast Publisher plugin before 3.5.6 is susceptible to SQL injection. The Social & Donations module, not activated by default, adds the REST route /services/contributor/(?P<id>[\d]+) and takes id and category parameters as arguments. Both parameters can be exploited, thereby potentially enabling an attacker to obtain sensitive information, modify data, and/or execute unauthorized administrative operations.
Impact
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data manipulation, or data leakage.
Remediation
Fixed in version 3.5.6.
WeaknessesCWE-89
Authorstheamanrawat
Template tagscve2021cvesqliwordpresswp-pluginwppodlove-podcasting-plugin-for-wordpresswpscanpodlovevkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:podlove:podlove_podcast_publisher:*:*:*:*:*:wordpress:*:*
https://wpscan.com/vulnerability/fb4d7988-60ff-4862-96a1-80b1866336fe https://wordpress.org/plugins/podlove-podcasting-plugin-for-wordpress/ https://github.com/podlove/podlove-publisher/commit/aa8a343a2e2333b34a422f801adee09b020c6d76 https://nvd.nist.gov/vuln/detail/CVE-2021-24666
Source: ProjectDiscovery
References
3nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2021-24666 wpscan.com
https://wpscan.com/vulnerability/fb4d7988-60ff-4862-96a1-80b1866336fe