CVE-2020-8658

The BestWebSoft Htaccess plugin through 1.8.1 for WordPress allows wp-admin/admin.php?page=htaccess.php&action=htaccess_editor CSRF. The flag htccss_nonce_name passes the nonce to WordPress but the plugin does not validate it correctly, resulting in a wrong implementation of anti-CSRF protection. In this way, an attacker is able to direct the victim to a malicious web page that modifies the .htaccess file, and takes control of the website.

The BestWebSoft Htaccess plugin through 1.8.1 for WordPress allows wp-admin/admin.php?page=htaccess.php&action=htaccess_editor CSRF. The flag htccss_nonce_name passes the nonce to WordPress but the plugin does not validate it correctly, resulting in a wrong implementation of anti-CSRF protection. In this way, an attacker is able to direct the victim to a malicious web page that modifies the .htaccess file, and takes control of the website.

El plugin BestWebSoft Htaccess versiones hasta 1.8.1 para WordPress, permite un ataque de tipo CSRF de wp-admin/admin.php?page=htaccess.php&action=htaccess_editor. El flag htccss_nonce_name pasa el nonce hacia WordPress pero el plugin no lo comprueba correctamente, resultando en una implementación incorrecta de la protección anti-CSRF. De esta manera, un atacante puede direccionar a la víctima a una página web maliciosa que modifica el archivo .htaccess y toma el control del sitio web.