Enhancement: cves/2021/CVE-2021-24970.yaml by md

cves/2021/CVE-2021-24970.yaml

@@ -1,16 +1,16 @@
 id: CVE-2021-24970
 
 info:
-  name: All-In-One-Gallery - Local File Inclusion
+  name: WordPress All-In-One Video Gallery <2.5.0 - Local File Inclusion
   author: r3Y3r53
   severity: high
   description: |
-    The All-in-One Video Gallery WordPress plugin before 2.5.0 does not sanitise and validate the tab parameter before using it in a require statement in the admin dashboard, leading to a Local File Inclusion issue
+    WordPress All-in-One Video Gallery WordPress plugin before 2.5.0 is susceptible to local file inclusion. The plugin does not sanitize and validate the tab parameter before using it in a require statement in the admin dashboard. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations.
   reference:
     - https://wpscan.com/vulnerability/9b15d47e-43b6-49a8-b2c3-b99c92101e10
     - https://wordpress.org/plugins/all-in-one-video-gallery
     - https://nvd.nist.gov/vuln/detail/CVE-2021-24970
-  remediation: Fixed in version 2.5.4
+  remediation: Fixed in version 2.5.4.
   classification:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
     cvss-score: 7.2
@@ -43,3 +43,5 @@ requests:
           - 'contains(body_2, "Hello world!")'
           - 'contains(body_2, "Welcome to WordPress")'
         condition: and
+
+# Enhanced by md on 2023/03/28