← CVE Intelligence

CVE-2021-24820

Cost Calculator <= 1.6 - Authenticated Local File Inclusion PUBLISHED

Description (CNA)

The Cost Calculator WordPress plugin through 1.6 allows authenticated users (Contributor+ in versions < 1.5, and Admin+ in versions <= 1.6) to perform path traversal and local PHP file inclusion on Windows Web Servers via the Cost Calculator post's Layout

Affected (CNA)

Vendor / productVersions
Unknown / Cost Calculatoraffected 1.6 through 1.6

CWE

CWE-22

References

ADP enrichment

CVE

No English description supplied.