CVE-2021-24820 in Cost Calculator Plugin

Sumário

de MITRE • 28/02/2022

The Cost Calculator WordPress plugin through 1.4 allows users with a role as low as Contributor to perform path traversal and local PHP file inclusion on Windows Web Servers via the Cost Calculator post's Layout

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservar: 14/01/2021
• Divulgação: 28/02/2022
• Moderação: aceite
• Entrada: VDB-193920
• CPE: pronto
• CWE: CWE-22 (confirmado)
• CVSS: 5.5 (VulDB)
• EPSS: 0.03000
• KEV: não
• Atividades: muito baixo
• Sector: Hostingprovider

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-24820
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-24820
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-24820/