CVE-2021-24145

Arbitrary file upload in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not properly check the imported file, allowing PHP ones to be uploaded by administrator by using the 'text/csv' content-type in the request.

CVSS v3.1

7.2 HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

87.31% chance of exploitation in the next 30 days, 100th percentile

Nuclei

high · CWE-434

Published

2021-03-18

Updated

2024-08-03

Proof-of-concept exploits (4)

• http://packetstormsecurity.com/files/163346/WordPress-Modern-Events-Calendar-5.16.2-Shell…
• http://packetstormsecurity.com/files/163672/WordPress-Modern-Events-Calendar-Remote-Code-…
• https://wpscan.com/vulnerability/f42cc26b-9aab-4824-8168-b5b8571d1610
• dnr6419/CVE-2021-241453★ · 2022-02-17

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24145.yaml

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_plugin_modern_even…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/50082

References

• CVE Record
• NVD entry

Related

• CVE-2018-16167
• CVE-2018-6905
• CVE-2019-7609
• CVE-2021-24545
• CVE-2021-25646
• CVE-2021-29447