CVE-2021-24820 in Cost Calculator Plugin

Résumé

par MITRE • 28/02/2022

The Cost Calculator WordPress plugin through 1.4 allows users with a role as low as Contributor to perform path traversal and local PHP file inclusion on Windows Web Servers via the Cost Calculator post's Layout

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Réserver: 14/01/2021
• Divulgation: 28/02/2022
• Modérer: accepté
• Entrée: VDB-193920
• CPE: prêt
• CWE: CWE-22 (confirmé)
• CVSS: 5.5 (VulDB)
• EPSS: 0.03000
• KEV: non
• Activités: très faible
• Secteur: Hostingprovider

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-24820
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-24820
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-24820/