cleantalk
Vulnerabilities and Security Researches

Business Directory Plugin – Easy Listing Directories for WordPress, CVE-2021-24178

CVE, Research URL

CVE-2021-24178

Published on
May 06, 2021
Research Description
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 suffered from Cross-Site Request Forgery issues, allowing an attacker to make a logged in administrator add, edit or delete form fields, which could also lead to Stored Cross-Site Scripting issues.
Affected versions
max 5.11.1.
Status
vulnerable