Vulnerabilities > CVE-2021-24507 - Unspecified vulnerability in Brainstormforce Astra

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

brainstormforce

critical

NVD

Published: 2021-08-09

Updated: 2024-11-21

Summary

The Astra Pro Addon WordPress plugin before 3.5.2 did not properly sanitise or escape some of the POST parameters from the astra_pagination_infinite and astra_shop_pagination_infinite AJAX action (available to both unauthenticated and authenticated user) before using them in SQL statement, leading to an SQL Injection issues

Vulnerable Configurations

Part	Description	Count
Application	Brainstormforce Brainstormforce Astra 1.0.0 Brainstormforce Astra 1.0.1 Brainstormforce Astra 1.0.2 Brainstormforce Astra 1.0.3 Brainstormforce Astra 1.0.4 Brainstormforce Astra 1.1.0 Brainstormforce Astra 1.2.0 Brainstormforce Astra 1.2.1 Brainstormforce Astra 1.2.2 Brainstormforce Astra 1.2.3 Brainstormforce Astra 1.3.0 Brainstormforce Astra 1.3.1 Brainstormforce Astra 1.3.2 Brainstormforce Astra 1.3.3 Brainstormforce Astra 1.3.4 Brainstormforce Astra 1.4.0 Brainstormforce Astra 1.4.1 Brainstormforce Astra 1.4.2 Brainstormforce Astra 1.4.3 Brainstormforce Astra 1.4.4 Brainstormforce Astra 1.4.5 Brainstormforce Astra 1.4.6 Brainstormforce Astra 1.4.7 Brainstormforce Astra 1.5.0 Brainstormforce Astra 1.5.1 Brainstormforce Astra 1.5.2 Brainstormforce Astra 1.6.0 Brainstormforce Astra 1.6.1 Brainstormforce Astra 1.6.2 Brainstormforce Astra 1.6.3 Brainstormforce Astra 1.6.4 Brainstormforce Astra 1.6.5 Brainstormforce Astra 1.6.6 Brainstormforce Astra 1.6.6.1 Brainstormforce Astra 1.6.7 Brainstormforce Astra 1.6.8 Brainstormforce Astra 1.6.9 Brainstormforce Astra 1.6.10 Brainstormforce Astra 1.6.11 Brainstormforce Astra 1.6.12 Brainstormforce Astra 1.6.13 Brainstormforce Astra 1.6.14 Brainstormforce Astra 1.7.0 Brainstormforce Astra 1.7.1 Brainstormforce Astra 1.8.0 Brainstormforce Astra 1.8.1 Brainstormforce Astra 1.8.2 Brainstormforce Astra 1.8.3 Brainstormforce Astra 1.8.4 Brainstormforce Astra 1.8.5 Brainstormforce Astra 1.8.6 Brainstormforce Astra 1.8.7 Brainstormforce Astra 1.8.8 Brainstormforce Astra 2.0.0 Brainstormforce Astra 2.1.0 Brainstormforce Astra 2.1.1 Brainstormforce Astra 2.1.2 Brainstormforce Astra 2.1.3 Brainstormforce Astra 2.1.4 Brainstormforce Astra 2.2.0 Brainstormforce Astra 2.2.1 Brainstormforce Astra 2.2.2 Brainstormforce Astra 2.2.3 Brainstormforce Astra 2.2.4 Brainstormforce Astra 2.2.5 Brainstormforce Astra 2.3.0 Brainstormforce Astra 2.3.1 Brainstormforce Astra 2.3.2 Brainstormforce Astra 2.3.3 Brainstormforce Astra 2.3.4 Brainstormforce Astra 2.4.0 Brainstormforce Astra 2.4.1 Brainstormforce Astra 2.5.0 Brainstormforce Astra 2.5.1 Brainstormforce Astra 2.6.1 Brainstormforce Astra 2.6.2 Brainstormforce Astra 2.6.3 Brainstormforce Astra 2.6.4 Brainstormforce Astra 2.7.0 Brainstormforce Astra 2.7.1 Brainstormforce Astra 2.7.2 Brainstormforce Astra 2.7.3 Brainstormforce Astra 3.0.0 Brainstormforce Astra 3.0.1 Brainstormforce Astra 3.1.0 Brainstormforce Astra 3.2.0 Brainstormforce Astra 3.3.0 Brainstormforce Astra 3.3.1 Brainstormforce Astra 3.3.2 Brainstormforce Astra 3.4.0 Brainstormforce Astra 3.4.1 Brainstormforce Astra 3.4.2 Brainstormforce Astra 3.5.0 Brainstormforce Astra 3.5.1	144

Summary

Vulnerable Configurations

References