Modal Window < 5.2.2 - RFI leading to RCE via CSRF
CVE-2021-25051
8.8HIGH
Key Information:
- Vendor
- Wordpress
- Vendor
- CVE Published:
- 10 January 2022
Summary
The Modal Window WordPress plugin before 5.2.2 within the wow-company admin menu page allows to include() arbitrary file with PHP extension (as well as with data:// or http:// protocols), thus leading to CSRF RCE.
Affected Version(s)
Modal Window – create popup modal window 5.2.2
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Krzysztof Zając