Not rated

CVE-2020-36503 The Connections Business Directory WordPress plugin before 9.7 does not validate or sanitise some connections' fields,…

Description

The Connections Business Directory WordPress plugin before 9.7 does not validate or sanitise some connections' fields, which could lead to a CSV injection issue

Affected products and versions

Product	Affected versions	Fixed in
Connections Business Directory 9.7	earliest → < 9.7	9.7

The 3 CVEs of Connections Business Directory →

CVE-2026-86789 The Connections Business Directory WordPress plugin through 10.4.67 does not apply its visibility and… 5.3 Medium CVE-2021-24794 The Connections Business Directory WordPress plugin before 10.4.3 does not escape the Address settings when creating… Not rated

Do you use Connections Business Directory?

Track this CVE Watch Connections Business Directory Check my SBOMs

www.cveye.io/en/cve/CVE-2020-36503

Timeline

Published November 1, 2021
Last modified August 4, 2024

References

github.com github.com
wpscan.com wpscan.com

Track this CVE

CVE-2020-36503 The Connections Business Directory WordPress plugin before 9.7 does not validate or sanitise some connections' fields,…

Description

Affected products and versions

Other CVEs of Connections Business Directory