CVE-2021-24794

The Connections Business Directory WordPress plugin before 10.4.3 does not escape the Address settings when creating an Entry, which could allow high privilege users to perform Cross-Site Scripting when the unfilteredhtml capability is disallowed...

CVE-2021-24794

The Connections Business Directory WordPress plugin before 10.4.3 does not escape the Address settings when creating an Entry, which could allow high privilege users to perform Cross-Site Scripting when the unfilteredhtml capability is disallowed...

CVE-2021-24794

CVE-2021-24794 concerns the WordPress plugin Connections Business Directory (versions before 10.4.3). The vulnerability is a failure to escape the Address settings when creating an Entry, potentially allowing stored Cross-Site Scripting if the unfiltered_html capability is disallowed. The impact ...

CVE-2021-24794 Connections Business Directory < 10.4.3 - Admin+ Stored Cross-Site Scripting

The Connections Business Directory WordPress plugin before 10.4.3 does not escape the Address settings when creating an Entry, which could allow high privilege users to perform Cross-Site Scripting when the unfilteredhtml capability is disallowed...