Skip to content
OpenAdvisories
Unscored CVE-2021-24178 EUVD-2021-11092GHSA-4r7v-8p9v-gphx

Business Directory Plugin < 5.11.1 - Arbitrary Add/Edit/Delete Form Field to Stored XSS

Published May 5, 2021 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 suffered from Cross-Site Request Forgery issues, allowing an attacker to make a logged in administrator add, edit or delete form fields, which could also lead to Stored Cross-Site Scripting issues.

Affected products

VendorProductAffectedFixed
Business Directory Team Business Directory Plugin – Easy Listing Directories for WordPress 5.11.1 – < 5.11.1 5.11.1

References