Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24820

Cost Calculator <= 1.6 - Authenticated Local File Inclusion

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Cost Calculator WordPress plugin through 1.6 allows authenticated users (Contributor+ in versions < 1.5, and Admin+ in versions <= 1.6) to perform path traversal and local PHP file inclusion on Windows Web Servers via the Cost Calculator post's Layout

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Cost Calculator

  • 1.6 to ≤ 1.6affected

References