cve/2021/CVE-2021-24371.md

### [CVE-2021-24371](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-24371)
![](https://img.shields.io/static/v1?label=Product&message=RSVPMaker&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=8.7.3%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-918%20Server-Side%20Request%20Forgery%20(SSRF)&color=brightgreen)

### Description

The Import feature of the RSVPMaker WordPress plugin before 8.7.3 (/wp-admin/tools.php?page=rsvpmaker_export_screen) takes an URL input and calls curl on it, without first validating it to ensure it's a remote one. As a result, a high privilege user could use that feature to scan the internal network via a SSRF attack.

### POC

#### Reference
- https://codevigilant.com/disclosure/2021/wp-plugin-rsvpmaker/
- https://wpscan.com/vulnerability/63be225c-ebee-4cac-b43e-cf033ee7425d

#### Github
- https://github.com/20142995/nuclei-templates