CVE-2021-24528 FluentSMTP < 2.0.1 - Authenticated Stored XSS
Authenticated attackers with plugin management roles can inject malicious scripts via unsanitized SMTP settings, leading to stored XSS.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2021-24528?
CVE-2021-24528 is a medium-severity cross-site scripting vulnerability in Unknown FluentSMTP – WordPress Mail SMTP, SES, SendGrid, Mailgun and Any SMTP Plugin, published on 30 Aug 2021. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
The FluentSMTP WordPress plugin before 2.0.1 does not sanitize parameters before storing the settings in the database, nor does the plugin escape the values before outputting them when viewing the SMTP settings set by this plugin, leading to a stored cross site scripting (XSS) vulnerability. Only users with roles capable of managing plugins can modify the plugin's settings.
Weakness: CWE-79
Which versions are affected by CVE-2021-24528?
It affects 1 product.
Products include Wpmanageninja Fluentsmtp.
How do I fix CVE-2021-24528?
No fix has been published for CVE-2021-24528 yet. Limit exposure of the affected software until one is available.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2021-24528 being exploited?
There is no known exploitation of CVE-2021-24528 in the wild and no public exploit code.
Other vulnerabilities in Unknown FluentSMTP – WordPress Mail SMTP, SES, SendGrid, Mailgun and Any SMTP Plugin
Sources
Also known as GHSA-vcw9-mv32-wmgq.