Security Advisory

CVE-2021-24890

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-09-26 12:35:29

Last updated 2025-05-21 19:27:31

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The Scripts Organizer WordPress plugin before 3.0 does not have capability and CSRF checks in the saveScript AJAX action, available to both unauthenticated and authenticated users, and does not validate user input in any way, which could allow unauthenticated users to put arbitrary PHP code in a file

← Browse all CVEs View on cve.org ↗