← CVE Intelligence

CVE-2021-25020

CAOS < 4.1.9 - Admin+ Arbitrary Folder Deletion via Path Traversal PUBLISHED

Description (CNA)

The CAOS | Host Google Analytics Locally WordPress plugin before 4.1.9 does not validate the cache directory setting, allowing high privilege users to use a path traversal vector and delete arbitrary folders when uninstalling the plugin

Affected (CNA)

Vendor / productVersions
Unknown / CAOS | Host Google Analytics Locallyaffected 4.1.9 before 4.1.9

CWE

CWE-22

References

ADP enrichment

CVE

No English description supplied.