Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 07/07/2021 Updated: 10/07/2021

CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10

CVSS v3 Base Score: 9.1 | Impact Score: 5.2 | Exploitability Score: 3.9

VMScore: 570

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P

Server-side request forgery (SSRF) in the Import XML and RSS Feeds (import-xml-feed) plugin 2.0.1 for WordPress via the data parameter in a moove_read_xml action.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mooveagency import xml and rss feeds 2.0.1

CVE-2020-24148 Proof-of-Concept

CVE-2020-24148 Server-side request forgery (SSRF) in the Import XML and RSS Feeds (import-xml-feed) plugin 201 for WordPress via the data parameter in a moove_read_xml action Vulnerable code: /moove-actionsphp: public function moove_read_xml() { $args = array( 'data' => esc_sql( wp_unslash( $_POST['data'] ) ), 'xmlaction'

CWE-918 https://wordpress.org/plugins/import-xml-feed/#developers https://github.com/secwx/research/blob/main/cve/CVE-2020-24148.md https://nvd.nist.gov https://github.com/dwisiswant0/CVE-2020-24148

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2020-24148

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect