Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Connections-pro Component: Connections Business Directory Clear all filters
TI-2021-07076 CVE-2021-24794 · GHSA-2p79-p2xq-4xwj

Connections Business Directory < 10.4.3 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Connections Business Directory WordPress plugin before 10.4.3 does not escape the Address settings when creating an Entry, which could allow high privilege users to perform Cross-Site Scripting when the unfiltered_ht…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00728 Published 2021-11-01 Fixed in 10.4.3 CWE-79
TI-2020-18743 CVE-2020-36503 · GHSA-cv8q-93v6-rxm5

Connections Business Directory < 9.7 - Admin+ CSV Injection

Priority LOW 37

The Connections Business Directory WordPress plugin before 9.7 does not validate or sanitise some connections' fields, which could lead to a CSV injection issue

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.01247 Published 2021-11-01 Fixed in 9.7 CWE-1236