CVE-2021-25051

CVE-2021-25051: Modal Window < 5.2.2 - RFI leading to RCE via CSRF

Vendor Unknown
Product Modal Window – create popup modal window
Weakness CWE-352 · CSRF
Published January 10, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Modal Window WordPress plugin before 5.2.2 within the wow-company admin menu page allows to include() arbitrary file with PHP extension (as well as with data:// or http:// protocols), thus leading to CSRF RCE.

Key dates

02Disclosure timeline

January 10, 2022 CVE published
August 3, 2024 Record updated