Chameleon CSS <= 1.2 - Subscriber+ SQL Injection
Vulnerability Description
The Chameleon CSS WordPress plugin through 1.2 does not have any CSRF and capability checks in all its AJAX calls, allowing any authenticated user, such as subscriber to call them and perform unauthorised actions. One of AJAX call, remove_css, also does not sanitise or escape the css_id POST parameter before using it in a SQL statement, leading to a SQL Injection
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-24626
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Shreya Pohekar of Codevigilant Project
References
More from Unknown
View All →Affected Vendor
Unknown
View all reports →