CVE-2021-24966

CVE-2021-24966: Error Log Viewer Plugin <= 1.1.1 - Admin+ Arbitrary File Clearing

Vendor Unknown

Product Error Log Viewer by BestWebSoft

Weakness CWE-73

Published March 14, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Error Log Viewer WordPress plugin through 1.1.1 does not validate the path of the log file to clear, allowing high privilege users to clear arbitrary files on the web server, including those outside of the blog folder

Key dates

02Disclosure timeline

March 14, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-24966 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/73.html