CVE-2021-24950: Insight Core <= 1.0 - Subscriber+ PHP Object Injection & Stored XSS
The Insight Core WordPress plugin through 1.0 does not have any authorisation and CSRF checks in the insightcustomizeroptionsimport (available to any authenticated user), does not validate user input before passing it to unserialize(), nor sanitise and escape it before outputting it in the response. As a result, it could allow users with a role as low as Subscriber to perform PHP Object Injection, as well as Stored Cross-Site Scripting attacks
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-24950?
CVE-2021-24950 is classified as a high severity vulnerability due to the lack of authorization and CSRF checks and the potential for code execution.
How do I fix CVE-2021-24950?
To fix CVE-2021-24950, update the Insight Core WordPress plugin to a patched version that includes proper authorization and input validation.
What versions are affected by CVE-2021-24950?
CVE-2021-24950 affects version 1.0 of the Insight Core WordPress plugin.
What issues does CVE-2021-24950 introduce?
CVE-2021-24950 introduces risks such as unauthorized access and the possibility of code execution through unserialize manipulation.
Who can exploit CVE-2021-24950?
Any authenticated user can potentially exploit CVE-2021-24950 due to the absence of proper authorization checks.