Connections-Pro Connections Business Directory
3 CVEs affecting Connections-Pro Connections Business Directory. Latest disclosed: 2023-06-26. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-36503 | High | 8.0 | 2021-11-01 | The Connections Business Directory WordPress plugin before 9.7 does not validate or sanitise some connections' fields, which could lead to a CSV injection issue |
CVE-2023-29437 | Medium | 6.5 | 2023-06-26 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Steven A. Zahm Connections Business Directory plugin <= 10.4.36 versions. |
CVE-2021-24794 | Medium | 4.8 | 2021-11-01 | The Connections Business Directory WordPress plugin before 10.4.3 does not escape the Address settings when creating an Entry, which could allow high privilege… |