CVE-2021-24179
N/A
N/A
Summary
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator import files. As the plugin also did not validate uploaded files, it could lead to RCE.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Business Directory Team | Business Directory Plugin – Easy Listing Directories for WordPress | 5.11 < 5.11 | affected |
Weaknesses
- CWE-352: CWE-352 Cross-Site Request Forgery (CSRF)
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.