Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2020-36503

Connections Business Directory < 9.7 - Admin+ CSV Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Connections Business Directory WordPress plugin before 9.7 does not validate or sanitise some connections' fields, which could lead to a CSV injection issue

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Connections Business Directory

  • 9.7 to < 9.7affected

References