Medium · 6.5 CVE-2023-29437 EUVD-2023-33006GHSA-p94w-3g52-47j8

WordPress Connections Business Directory Plugin <= 10.4.36 is vulnerable to Cross Site Scripting (XSS)

Published Jun 26, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Steven A. Zahm Connections Business Directory plugin <= 10.4.36 versions.

Vendor	Product	Affected	Fixed
Steven A. Zahm	Connections Business Directory	≤ 10.4.36	—