Skip to content
Sign in
Not rated

CVE-2021-24794 The Connections Business Directory WordPress plugin before 10.4.3 does not escape the Address settings when creating…

Description

The Connections Business Directory WordPress plugin before 10.4.3 does not escape the Address settings when creating an Entry, which could allow high privilege users to perform Cross-Site Scripting when the unfiltered_html capability is disallowed.

Affected products and versions

Product Affected versions Fixed in
Connections Business Directory 10.4 earliest → < 10.4.3 10.4.3

Other CVEs of Connections Business Directory

The 3 CVEs of Connections Business Directory →
CVE-2026-86789 The Connections Business Directory WordPress plugin through 10.4.67 does not apply its visibility and… 5.3 Medium CVE-2020-36503 The Connections Business Directory WordPress plugin before 9.7 does not validate or sanitise some connections' fields,… Not rated
Track this CVE