CVE-2021-4350 — Missing Authorization in Frontend File Manager Plugin

CWE-862 — Missing Authorization3 documents3 sources
Severity
5.3MEDIUMNVD
CNA7.2
EPSS
0.1%
top 64.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Nmedia Frontend File Manager PluginNajeebmedia Frontend File Manager Plugin
Timeline
PublishedJun 7

Description

The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated HTML Injection in versions up to, and including, 18.2. This is due to lacking authentication protections on the wpfm_send_file_in_email AJAX action. This makes it possible for unauthenticated attackers to send emails using the site with a custom subject, recipient email, and body with unsanitized HTML content. This effectively lets the attacker use the site as a spam relay.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

🔴Vulnerability Details

2
CVEList
Frontend File Manager <= 18.2 - Unauthenticated HTML Injection leading to Spam Emails↗2023-06-07
▶
GHSA
GHSA-gc42-wwv9-7qjr: The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated HTML Injection in versions up to, and including, 18↗2023-06-07
▶
CVE-2021-4350 — Missing Authorization | cvebase