Secure Copy Content Protection and Content Locking < 2.8.2 - Unauthenticated SQL Injection
CVE-2021-24931

9.8CRITICAL

Key Information:

Vendor
Wordpress
Status
Secure Copy Content Protection And Content Locking
Vendor
CVE Published:
6 December 2021

Summary

The Secure Copy Content Protection and Content Locking WordPress plugin before 2.8.2 does not escape the sccp_id parameter of the ays_sccp_results_export_file AJAX action (available to both unauthenticated and authenticated users) before using it in a SQL statement, leading to an SQL injection.

Affected Version(s)

Secure Copy Content Protection and Content Locking 2.8.2

References

https://wpscan.com/vulnerability/1cd52d61-af75-43ed-9b99-...
x_refsource_MISC
http://packetstormsecurity.com/files/165946/WordPress-Sec...
x_refsource_MISC

EPSS Score

96% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Krzysztof Zając
.