Loco Translate < 2.5.4 - Authenticated PHP Code Injection
CVE-2021-24721

6.5MEDIUM

Key Information:

Vendor
Wordpress
Status
Loco Translate
Vendor
CVE Published:
8 November 2021

Summary

The Loco Translate WordPress plugin before 2.5.4 mishandles data inputs which get saved to a file, which can be renamed to an extension ending in .php, resulting in authenticated "translator" users being able to inject PHP code into files ending with .php in web accessible locations.

Affected Version(s)

Loco Translate 2.5.4

References

https://wpscan.com/vulnerability/bc7d4774-fce8-4b0b-8015-...
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Tomi Ashari
.