CVE-2021-24284

Kaswara Modern VC Addons <= 3.0.1 - Unauthenticated Arbitrary File Upload

The Kaswara Modern VC Addons WordPress plugin through 3.0.1 allows unauthenticated arbitrary file upload via the 'uploadFontIcon' AJAX action. The supplied zipfile being unzipped in the wp-content/uploads/kaswara/fonts_icon directory with no checks for malicious files such as PHP.

Affected

SayenThemes · Kaswara Modern VC Addons

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

42.14% chance of exploitation in the next 30 days, 99th percentile

Nuclei

critical · CWE-434

Published

2021-05-14

Updated

2024-08-03

Proof-of-concept exploits (3)

• http://packetstormsecurity.com/files/167743/WordPress-Kaswara-Modern-WPBakery-Page-Builde…
• https://wpscan.com/vulnerability/8d66e338-a88f-4610-8d12-43e8be2da8c5
• InMyMine7/SharkXploit9★ · 2023-12-05

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24284.yaml

Security advisories

• https://codecanyon.net/item/kaswara-modern-visual-composer-addons/19341477

References

• CVE Record
• NVD entry

Related

• CVE-2021-25094