CVE-2020-36503

The Connections Business Directory WordPress plugin before 9.7 does not validate or sanitise some connections' fields, which could lead to a CSV injection issue...

CVE-2020-36503

creationtimestamp| type| source ---|---|--- 2021-11-01 11:21:21+00:00| seen| https://t.me/cibsecurity/31537...

CVE-2020-36503

The Connections Business Directory WordPress plugin before 9.7 does not validate or sanitise some connections' fields, which could lead to a CSV injection issue...

CVE-2020-36503

The CVE concerns the WordPress Connections Business Directory plugin prior to version 9.7, where some connection fields are not validated or sanitized, enabling CSV injection. The issue is documented as a CSV injection vulnerability with a high impact potential (CVSS v3.1: 8.0, HIGH; v2.0: 6.0, M...

CVE-2020-36503 Connections Business Directory < 9.7 - Admin+ CSV Injection

The Connections Business Directory WordPress plugin before 9.7 does not validate or sanitise some connections' fields, which could lead to a CSV injection issue...