CVE-2021-24820CWE-22

Cost Calculator <= 1.6 - Authenticated Local File Inclusion

published February 28, 2022

CVSS
—
EPSS
3%
Percentile
87.4
In the wild
Unconfirmed
What it is

The Cost Calculator WordPress plugin through 1.6 allows authenticated users (Contributor+ in versions < 1.5, and Admin+ in versions <= 1.6) to perform path traversal and local PHP file inclusion on Windows Web Servers via the Cost Calculator post's Layout

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03047 · 87.4th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2022-02-28T09:06Z
EPSS history
Timeline
  • 28 FEB 09:06Z
    Cost Calculator <= 1.6 - Authenticated Local File Inclusion
    cvelistv5