.. / CVE-2021-24146

• Info Disclosure
• Nuclei
• Web

Exploit for WordPress Modern Events Calendar Lite <5.16.5 - Sensitive Information Disclosure (CVE-2021-24146)

Description:

WordPress Modern Events Calendar Lite before 5.16.5 does not properly restrict access to the export files, allowing unauthenticated users to exports all events data in CSV or XML format.

Nuclei Template

View the template here CVE-2021-24146.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-24146.yaml

References: