CVE-2021-24249
Description
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator export files, which could then be downloaded by the attacker to get access to PII, such as email, home addresses etc
CWE
- CWE-352 — CWE-352 Cross-Site Request Forgery (CSRF)
Affected
- Business Directory Team / Business Directory Plugin – Easy Listing Directories for WordPress — v=5.11.2 <5.11.2 [affected]
CVSS
- (none)
References
- https://wpscan.com/vulnerability/fc4cf749-34ef-43b8-a529-5065d698ab81 x_refsource_CONFIRM
Source
cvelistV5-main/cves/2021/24xxx/CVE-2021-24249.json