high8.0
CVE-2020-36503
The Connections Business Directory WordPress plugin before 9.7 does not validate or sanitise some connections' fields, which could lead to a CSV injection issue
Impact
The Connections Business Directory WordPress plugin before 9.7 does not validate or sanitise some connections' fields, which could lead to a CSV injection issue
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Connections-Pro | Connections Business Directory | from 0.7.3.2 through 9.6 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/Connections-Business-Directory/Connections/issues/474
- https://wpscan.com/vulnerability/dd394b55-c86f-4fa2-aae8-5903ca0b95ec
- https://github.com/Connections-Business-Directory/Connections/issues/474
- https://wpscan.com/vulnerability/dd394b55-c86f-4fa2-aae8-5903ca0b95ec