Redux Framework 4.4.12 - 4.4.17 - Unauthenticated JSON File Upload to Stored Cross-Site Scripting

Summary

The Redux Framework plugin for WordPress is vulnerable to unauthenticated JSON file uploads due to missing authorization and capability checks on the Redux_Color_Scheme_Import function in versions 4.4.12 to 4.4.17. This makes it possible for unauthenticated attackers to upload JSON files, which can be used to conduct stored cross-site scripting attacks and, in some rare cases, when the wp_filesystem fails to initialize - to Remote Code Execution.

Timeline

1. Jul 23, 2024, 2:01 AM UTCCVE published
2. Jul 23, 2024, 1:09 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: yes · Technical impact: partial

3. Aug 1, 2024, 9:45 PM UTCRecord last updated

Affected versions

• davidanderson Redux Framework

  From 4.4.12 · through 4.4.17

References 7