Strategy11: >> Business Directory Plugin - Easy Listing Directories >> 5.11.1 Security Vulnerabilities
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator export files, which could then be downloaded by the attacker to get access to PII, such as email, home addresses etc
CVSS Score
6.5
EPSS Score
0.001
Published
2021-05-06
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from lack of sanitisation in the label of the Form Fields, leading to Authenticated Stored Cross-Site Scripting issues across various pages of the plugin.
CVSS Score
5.4
EPSS Score
0.002
Published
2021-05-06