CVE-2021-24820 Cost Calculator <= 1.6 - Authenticated Local File Inclusion

2022-02-2809:06:10

CWE-22

WPScan

www.cve.org

cost calculator

authenticated users

path traversal

local file inclusion

windows web servers

EPSS

0.001

Percentile

40.2%

JSON

The Cost Calculator WordPress plugin through 1.6 allows authenticated users (Contributor+ in versions < 1.5, and Admin+ in versions <= 1.6) to perform path traversal and local PHP file inclusion on Windows Web Servers via the Cost Calculator post’s Layout

CNA Affected

[
  {
    "product": "Cost Calculator",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThanOrEqual": "1.6",
        "status": "affected",
        "version": "1.6",
        "versionType": "custom"
      }
    ]
  }
]

References

wpscan.com/vulnerability/47652b24-a6f0-4bbc-834e-496b88523fe7

EPSS

0.001

Percentile

40.2%

JSON

Related for CVELIST:CVE-2021-24820