Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2021-24145
HistoryMar 18, 2021 - 3:15 p.m.

Cross site request forgery (csrf)

2021-03-1815:15:00
PRIOn knowledge base
www.prio-n.com
5

6.8 Medium

AI Score

Confidence

High

0.965 High

EPSS

Percentile

99.6%

JSON

Arbitrary file upload in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not properly check the imported file, allowing PHP ones to be uploaded by administrator by using the ‘text/csv’ content-type in the request.

CPENameOperatorVersion
modern_events_calendar_litelt5.16.5

Related

packetstorm 2
cvelist 1
zdt 2
cve 1
checkpoint_advisories 1
nvd 1
wpvulndb 1
wpexploit 1
nuclei 1
githubexploit 1
osv 1
exploitdb 1
rapid7blog 1
packetstorm
packetstorm
WordPress Modern Events Calendar 5.16.2 Shell Upload
2021-07-02 00:00:00
WordPress Modern Events Calendar Remote Code Execution
2021-07-26 00:00:00
cvelist
cvelist
CVE-2021-24145 Modern Events Calendar Lite < 5.16.5 - Authenticated Arbitrary File Upload leading to RCE
2021-03-18 14:57:50
zdt
zdt
Wordpress Modern Events Calendar 5.16.2 Plugin - Remote Code Execution (Authenticated) Exploit
2021-07-02 00:00:00
WordPress Modern Events Calendar Remote Code Execution Exploit
2021-07-26 00:00:00
cve
cve
CVE-2021-24145
2021-03-18 15:15:15
checkpoint_advisories
checkpoint_advisories
WordPress Modern Events Calendar Plugin Remote Code Execution (CVE-2021-24145)
2021-08-18 00:00:00
nvd
nvd
CVE-2021-24145
2021-03-18 15:15:15
wpvulndb
wpvulndb
Modern Events Calendar Lite < 5.16.5 - Authenticated Arbitrary File Upload leading to RCE
2021-01-29 00:00:00
wpexploit
wpexploit
Modern Events Calendar Lite < 5.16.5 - Authenticated Arbitrary File Upload leading to RCE
2021-01-29 00:00:00
nuclei
nuclei
WordPress Modern Events Calendar Lite <5.16.5 - Authenticated Arbitrary File Upload
2023-03-05 13:42:10
githubexploit
githubexploit
Exploit for Unrestricted Upload of File with Dangerous Type in Webnus Modern Events Calendar Lite
2021-08-14 02:56:50
osv
osv
CVE-2021-24145
2021-03-18 15:15:15
exploitdb
exploitdb
Wordpress Plugin Modern Events Calendar 5.16.2 - Remote Code Execution (Authenticated)
2021-07-02 00:00:00
rapid7blog
rapid7blog
Metasploit Wrap-Up
2021-07-30 18:04:33

6.8 Medium

AI Score

Confidence

High

0.965 High

EPSS

Percentile

99.6%

JSON
Related for PRION:CVE-2021-24145
packetstorm2cvelist1zdt2cve1checkpoint_advisories1nvd1wpvulndb1wpexploit1nuclei1githubexploit1osv1exploitdb1rapid7blog1