Vulnerabilities > CVE-2021-24145 - Unspecified vulnerability in Webnus Modern Events Calendar Lite

CVSS 7.2 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

webnus

NVD

Published: 2021-03-18

Updated: 2024-11-21

Summary

Arbitrary file upload in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not properly check the imported file, allowing PHP ones to be uploaded by administrator by using the 'text/csv' content-type in the request.

Vulnerable Configurations

Part	Description	Count
Application	Webnus Webnus Modern Events Calendar Lite 3.1.0 Webnus Modern Events Calendar Lite 3.1.1 Webnus Modern Events Calendar Lite 3.1.2 Webnus Modern Events Calendar Lite 3.1.3 Webnus Modern Events Calendar Lite 3.1.4 Webnus Modern Events Calendar Lite 3.1.5 Webnus Modern Events Calendar Lite 3.1.6 Webnus Modern Events Calendar Lite 3.2.0 Webnus Modern Events Calendar Lite 3.3.0 Webnus Modern Events Calendar Lite 3.3.5 Webnus Modern Events Calendar Lite 3.4.0 Webnus Modern Events Calendar Lite 3.4.5 Webnus Modern Events Calendar Lite 3.5.0 Webnus Modern Events Calendar Lite 3.5.1 Webnus Modern Events Calendar Lite 3.5.2 Webnus Modern Events Calendar Lite 4.0.0 Webnus Modern Events Calendar Lite 4.1.0 Webnus Modern Events Calendar Lite 4.2.0 Webnus Modern Events Calendar Lite 4.2.1 Webnus Modern Events Calendar Lite 4.2.3 Webnus Modern Events Calendar Lite 4.2.4 Webnus Modern Events Calendar Lite 4.2.5 Webnus Modern Events Calendar Lite 4.3.0 Webnus Modern Events Calendar Lite 4.3.1 Webnus Modern Events Calendar Lite 4.3.2 Webnus Modern Events Calendar Lite 4.3.5 Webnus Modern Events Calendar Lite 4.3.6 Webnus Modern Events Calendar Lite 4.4.0 Webnus Modern Events Calendar Lite 4.4.5 Webnus Modern Events Calendar Lite 4.4.6 Webnus Modern Events Calendar Lite 4.4.7 Webnus Modern Events Calendar Lite 4.4.8 Webnus Modern Events Calendar Lite 4.4.9 Webnus Modern Events Calendar Lite 4.5.1 Webnus Modern Events Calendar Lite 4.6.0 Webnus Modern Events Calendar Lite 4.6.5 Webnus Modern Events Calendar Lite 4.7.0 Webnus Modern Events Calendar Lite 4.7.1 Webnus Modern Events Calendar Lite 4.7.5 Webnus Modern Events Calendar Lite 4.7.6 Webnus Modern Events Calendar Lite 4.7.7 Webnus Modern Events Calendar Lite 4.8.0 Webnus Modern Events Calendar Lite 4.8.1 Webnus Modern Events Calendar Lite 4.8.2 Webnus Modern Events Calendar Lite 4.8.3 Webnus Modern Events Calendar Lite 4.8.5 Webnus Modern Events Calendar Lite 4.9.0 Webnus Modern Events Calendar Lite 4.9.5 Webnus Modern Events Calendar Lite 5.0.0 Webnus Modern Events Calendar Lite 5.0.1 Webnus Modern Events Calendar Lite 5.0.2 Webnus Modern Events Calendar Lite 5.0.5 Webnus Modern Events Calendar Lite 5.1.0 Webnus Modern Events Calendar Lite 5.1.5 Webnus Modern Events Calendar Lite 5.1.6 Webnus Modern Events Calendar Lite 5.1.7 Webnus Modern Events Calendar Lite 5.1.8 Webnus Modern Events Calendar Lite 5.2.0 Webnus Modern Events Calendar Lite 5.2.1 Webnus Modern Events Calendar Lite 5.2.2 Webnus Modern Events Calendar Lite 5.2.3 Webnus Modern Events Calendar Lite 5.2.5 Webnus Modern Events Calendar Lite 5.2.6 Webnus Modern Events Calendar Lite 5.2.7 Webnus Modern Events Calendar Lite 5.3.0 Webnus Modern Events Calendar Lite 5.3.5 Webnus Modern Events Calendar Lite 5.4.0 Webnus Modern Events Calendar Lite 5.4.5 Webnus Modern Events Calendar Lite 5.4.6 Webnus Modern Events Calendar Lite 5.5.0 Webnus Modern Events Calendar Lite 5.6.0 Webnus Modern Events Calendar Lite 5.6.1 Webnus Modern Events Calendar Lite 5.6.5 Webnus Modern Events Calendar Lite 5.7.0 Webnus Modern Events Calendar Lite 5.7.5 Webnus Modern Events Calendar Lite 5.8.0 Webnus Modern Events Calendar Lite 5.8.5 Webnus Modern Events Calendar Lite 5.9.0 Webnus Modern Events Calendar Lite 5.9.5 Webnus Modern Events Calendar Lite 5.10.0 Webnus Modern Events Calendar Lite 5.10.5 Webnus Modern Events Calendar Lite 5.11.0 Webnus Modern Events Calendar Lite 5.11.5 Webnus Modern Events Calendar Lite 5.12.0 Webnus Modern Events Calendar Lite 5.12.5 Webnus Modern Events Calendar Lite 5.12.6 Webnus Modern Events Calendar Lite 5.13.0 Webnus Modern Events Calendar Lite 5.13.1 Webnus Modern Events Calendar Lite 5.13.5 Webnus Modern Events Calendar Lite 5.13.6 Webnus Modern Events Calendar Lite 5.14.0 Webnus Modern Events Calendar Lite 5.15.0 Webnus Modern Events Calendar Lite 5.15.5 Webnus Modern Events Calendar Lite 5.16.0 Webnus Modern Events Calendar Lite 5.16.1 Webnus Modern Events Calendar Lite 5.16.2	96

Summary

Vulnerable Configurations

References