CVE-2021-24820 in Cost Calculator Plugin

Riassunto

di MITRE • 28/02/2022

The Cost Calculator WordPress plugin through 1.4 allows users with a role as low as Contributor to perform path traversal and local PHP file inclusion on Windows Web Servers via the Cost Calculator post's Layout

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Prenotare: 14/01/2021
• Divulgazione: 28/02/2022
• Moderazione: accettato
• Voce: VDB-193920
• CPE: pronto
• CWE: CWE-22 (confermato)
• CVSS: 5.5 (VulDB)
• EPSS: 0.03000
• KEV: no
• Attività: molto basso
• Settore: Hostingprovider

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-24820
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-24820
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-24820/