Description
WordPress RVM存在目录遍历漏洞，此漏洞是缺乏校验导致的。
WordPress RVM CVE-2021-24947目录遍历漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2021-24947
https://patchstack.com/database/wordpress/plugin/responsive-vector-maps/vulnerability/wordpress-rvm-responsive-vector-maps-plugin-6-4-1-arbitrary-file-read-vulnerability
https://wpscan.com/vulnerability/c6bb12b1-6961-40bd-9110-edfa9ee41a18/
https://github.com/advisories/GHSA-4665-x724-m73j
https://www.cve.org/CVERecord?id=CVE-2021-24947
https://osv.dev/vulnerability/CVE-2021-24947
https://hackhalt.com/threat/cve-2021-24947/
https://strobes.co/vi/cve/CVE-2021-24947/