WPLegalPages < 2.7.1 - Subscriber+ Arbitrary Settings Update to Stored XSS
CVE-2021-25106

5.4MEDIUM

Key Information:

Vendor

Wordpress
Status
Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WPlegalpages
Vendor
CVE Published:
7 February 2022

What is CVE-2021-25106?

The Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WPLegalPages WordPress plugin before 2.7.1 does not check for authorisation and has a flawed CSRF logic when saving its settings, allowing any authenticated users, such as subscriber, to update them. Furthermore, due to the lack of sanitisation and escaping, it could lead to Stored Cross-Site Scripting

Affected Version(s)

Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WPLegalPages 2.7.1

References

https://wpscan.com/vulnerability/47df802d-5200-484b-959c-...
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Krzysztof ZajÄ…c
.