Improper Privilege Management in Woody ad snippets - insert any code, text, or ads via using conditions - #VU19929
Published: August 5, 2019
Vulnerability identifier: #VU19929
CSH Severity: High
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber
CVE-ID: N/A
CWE-ID: CWE-269
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vendor: Will Bontrager Software, LLC , Webcraftic
Affected software:
Woody ad snippets - insert any code, text, or ads via using conditions
Woody ad snippets - insert any code, text, or ads via using conditions
Detailed vulnerability description
The vulnerability allows a remote attacker to escalate privilege on the target system.
The vulnerability exists due to the missing capability check in the “insert-php/admin/includes/class.import.snippet.php” script. A remote attacker can import code snippets with a simple POST payload sent to the “/wp-admin/admin-post.php” script.
This vulnerability leads to the unauthenticated options import and with the Stored XSS issue can lead to remote code execution.
Remediation
Install updates from vendor's website.