Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2021/05/05 6:39 p.m.29 views

CVE-2021-24178 Business Directory Plugin < 5.11.1 - Arbitrary Add/Edit/Delete Form Field to Stored XSS

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 suffered from Cross-Site Request Forgery issues, allowing an attacker to make a logged in administrator add, edit or delete form fields, which could also lead to Stored Cross-Site Scripting issue...

8AI score0.00672EPSS
SaveExploits2References1
Rows per page
Query Builder