CVE-2021-24890 Scripts Organizer < 3.0 - Unauthenticated Arbitrary File Upload
Unauthenticated attackers can upload arbitrary PHP files via the saveScript AJAX action, leading to remote code execution.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2021-24890?
CVE-2021-24890 is a high-severity vulnerability in Unknown scripts-organizer, published on 26 Sep 2022. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
The Scripts Organizer WordPress plugin before 3.0 does not have capability and CSRF checks in the saveScript AJAX action, available to both unauthenticated and authenticated users, and does not validate user input in any way, which could allow unauthenticated users to put arbitrary PHP code in a file
Which versions are affected by CVE-2021-24890?
It affects 1 product.
Products include Dplugins Scripts Organizer.
How do I fix CVE-2021-24890?
No fix has been published for CVE-2021-24890 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-24890 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2021-24890 exists.
Sources
Also known as GHSA-73qx-mm4g-5qj8.