CVE-2021-24284

The Kaswara Modern VC Addons WordPress plugin through 3.0.1 allows unauthenticated arbitrary file upload via the 'uploadFontIcon' AJAX action. The supplied zipfile being unzipped in the wp-content/uploads/kaswara/fonts_icon directory with no checks for malicious files such as PHP.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

42.14% chance of exploitation in the next 30 days, 99th percentile

Nuclei

critical · CWE-434

Published

2021-05-14

Updated

2024-08-03

Proof-of-concept exploits (3)

• http://packetstormsecurity.com/files/167743/WordPress-Kaswara-Modern-WPBakery-Page-Builde…
• https://wpscan.com/vulnerability/8d66e338-a88f-4610-8d12-43e8be2da8c5
• InMyMine7/SharkXploit9★ · 2023-12-05

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24284.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2021-25094
• CVE-2021-24283
• CVE-2021-24285
• CVE-2021-24281
• CVE-2021-24286
• CVE-2021-24280