high7.2
CVE-2021-24248
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 did not properly check for imported files, forbidding cer…
Impact
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 did not properly check for imported files, forbidding certain extension via a blacklist approach, allowing administrator to import an archive with a .php4 inside for example, leading to RCE
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Strategy11 | Business Directory Plugin - Easy Listing Directories | before 5.11.1 |