Insight Core <= 1.0 - Authenticated PHP Object Injection & Stored Cross-Site Scripting

2021-12-28 00:00
Krzysztof Zając

Strategic Overview

Status
Unpatched
Affected PluginInsight Core
Affected Version<= 1.0
CVSS5.4Medium
CVECVE-2021-24950
View all Insight Core vulnerabilities

Vulnerability Overview

The Insight Core WordPress plugin through 1.0 does not have any authorisation and CSRF checks in the insight_customizer_options_import (available to any authenticated user), does not validate user input before passing it to unserialize(), nor sanitise and escape it before outputting it in the response. As a result, it could allow users with a role as low as Subscriber to perform PHP Object Injection, as well as Stored Cross-Site Scripting attacks

Technical Analysis

REMEDIATION: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement. --- IDENTIFIER: CWE-862 (Missing Authorization) The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

External References

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C