VYPR
Unrated severityNVD Advisory· Published Feb 28, 2022· Updated Aug 3, 2024

Cost Calculator <= 1.6 - Authenticated Local File Inclusion

CVE-2021-24820

Description

The Cost Calculator WordPress plugin through 1.6 allows authenticated users (Contributor+ in versions < 1.5, and Admin+ in versions <= 1.6) to perform path traversal and local PHP file inclusion on Windows Web Servers via the Cost Calculator post's Layout

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.