CVEs-PoC/2021/CVE-2021-24820.md

CVE-2021-24820

Description

The Cost Calculator WordPress plugin through 1.6 allows authenticated users (Contributor+ in versions < 1.5, and Admin+ in versions <= 1.6) to perform path traversal and local PHP file inclusion on Windows Web Servers via the Cost Calculator post's Layout

POC

Reference

• https://wpscan.com/vulnerability/47652b24-a6f0-4bbc-834e-496b88523fe7
• https://wpscan.com/vulnerability/47652b24-a6f0-4bbc-834e-496b88523fe7

Github

No PoCs found on GitHub currently.