Aller au contenu
Se connecter
Non notée

CVE-2021-24794 The Connections Business Directory WordPress plugin before 10.4.3 does not escape the Address settings when creating…

Description

The Connections Business Directory WordPress plugin before 10.4.3 does not escape the Address settings when creating an Entry, which could allow high privilege users to perform Cross-Site Scripting when the unfiltered_html capability is disallowed.

Produits et versions touchés

Produit Versions touchées Corrigé en
Connections Business Directory 10.4 premières → < 10.4.3 10.4.3

Autres CVE de Connections Business Directory

Les 3 CVE de Connections Business Directory →
CVE-2026-86789 The Connections Business Directory WordPress plugin through 10.4.67 does not apply its visibility and… 5.3 Moyenne CVE-2020-36503 The Connections Business Directory WordPress plugin before 9.7 does not validate or sanitise some connections' fields,… Non notée
Suivre cette CVE