CVE-2021-24820

The Cost Calculator WordPress plugin through 1.4 allows users with a role as low as Contributor to perform path traversal and local PHP file inclusion on Windows Web Servers via the Cost Calculator post's Layout
CVSS

No CVSS.

Configurations

No configuration.

Information

Published : 2022-02-28 09:15

Updated : 2022-02-28 13:38


NVD link : CVE-2021-24820

Mitre link : CVE-2021-24820


JSON object : View

Products Affected

No product.

CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')