Medium severity · published Nov 29, 2021
CVE-2021-24822
The Stylish Cost Calculator WordPress plugin before 7.0.4 does not have any authorisation and CSRF checks on some of its AJAX actions (available to authenticated users), which…
5.4
CVSS
0.3%
EPSS
No
On KEV
Description
The Stylish Cost Calculator WordPress plugin before 7.0.4 does not have any authorisation and CSRF checks on some of its AJAX actions (available to authenticated users), which could allow any authenticated users, such as subscriber to call them, and perform Stored Cross-Site Scripting attacks against logged in admin, as well as frontend users due to the lack of sanitisation and escaping in some parameters
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
Stylish Cost Calculator · Stylishcostcalculator
before 7.0.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-24822
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-24822
Exploit
https://wpscan.com/vulnerability/db84a782-d4c8-4abf-99ea-ea672a9b806e
More from Stylish Cost Calculator
6.1
CVE-2023-0983
The stylish-cost-calculator-premium WordPress plugin before 7.9.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Stored Cross-Site…