CVE-2021-24820

The CVE refers to WordPress Cost Calculator plugin (versions ≤ 1.6) that, due to insufficient filtering in the Layout parameter, allowed authenticated users (Contributor+