CVE-2021-24208

Published on: 04/05/2021 12:00:00 AM UTC

Last Modified on: 04/12/2021 01:10:00 PM UTC

CVE-2021-24208

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Certain versions of Wp Page Builder from Themeum contain the following vulnerability:

The editor of the WP Page Builder WordPress plugin before 1.2.4 allows lower-privileged users to insert unfiltered HTML, including JavaScript, into pages via the “Raw HTML” widget and the “Custom HTML” widgets (though the custom HTML widget requires sending a crafted request - it appears that this widget uses some form of client side validation but not server side validation), all of which are added via the “page_builder_data” parameter when performing the “wppb_page_save” AJAX action. It is also possible to insert malicious JavaScript via the “wppb_page_css” parameter (this can be done by closing out the style tag and opening a script tag) when performing the “wppb_page_save” AJAX action.

CVE-2021-24208 has been assigned by [email protected] to track the vulnerability - currently rated as MEDIUM severity.
Affected Vendor/Software: Unknown - WP Page Builder version < 1.2.4

CVSS3 Score: 5.4 - MEDIUM

Attack Vector ^ⓘ	Attack Complexity	Privileges Required	User Interaction
NETWORK	LOW	LOW	REQUIRED
Scope	Confidentiality Impact	Integrity Impact	Availability Impact
CHANGED	LOW	LOW	NONE

CVSS2 Score: 3.5 - LOW

Access Vector^ⓘ	Access Complexity	Authentication
NETWORK	MEDIUM	SINGLE
Confidentiality Impact	Integrity Impact	Availability Impact
NONE	PARTIAL	NONE

CVE References

Description	Tags ^ⓘ	Link
WP Page Builder Updated: Security Issues Fixed (Thanks to Wordfence) - Themeum	www.themeum.com text/html	MISC www.themeum.com/wp-page-builder-updated-v1-2-4/
Attention Required! \| Cloudflare	wpscan.com text/html Inactive LinkNot Archived	CONFIRM wpscan.com/vulnerability/c20e243d-b0de-4ae5-9a0d-b9d02c9b8141

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].

There are currently no QIDs associated with this CVE

Known Affected Configurations (CPE V2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Themeum	Wp Page Builder	All	All	All	All

cpe:2.3:a:themeum:wp_page_builder:*:*:*:*:*:wordpress:*:*:

Discovery Credit

Ramuel Gall

Social Mentions

Source	Title	Posted (UTC)
@CVEreport	CVE-2021-24208 : The editor of the WP Page Builder WordPress plugin before 1.2.4 allows lower-privileged users to i… twitter.com/i/web/status/1…	2021-04-05 18:47:14
/r/netcve	CVE-2021-24208	2021-04-05 18:55:22