Skip to content
OpenAdvisories
Unscored CVE-2021-24250 EUVD-2021-11164GHSA-5wm3-f8mj-hp67

Business Directory Plugin < 5.11.2 - Authenticated Stored Cross-Site Scripting

Published May 5, 2021 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from lack of sanitisation in the label of the Form Fields, leading to Authenticated Stored Cross-Site Scripting issues across various pages of the plugin.

Affected products

VendorProductAffectedFixed
Business Directory Team Business Directory Plugin – Easy Listing Directories for WordPress 5.11.2 – < 5.11.2 5.11.2

References