CVE-2021-24178

State: PUBLISHED · Published: 2021-05-05 · Updated: 2024-08-03 · Assigner: WPScan

Description

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 suffered from Cross-Site Request Forgery issues, allowing an attacker to make a logged in administrator add, edit or delete form fields, which could also lead to Stored Cross-Site Scripting issues.

CWE

CWE-352 — CWE-352 Cross-Site Request Forgery (CSRF)

Affected

Business Directory Team / Business Directory Plugin – Easy Listing Directories for WordPress — v=5.11.1 <5.11.1 [affected]

CVSS

(none)

References

https://wpscan.com/vulnerability/700f3b04-8298-447c-8d3c-4581880a63b5 x_refsource_CONFIRM

Source

cvelistV5-main/cves/2021/24xxx/CVE-2021-24178.json