CVE-2021-24250

CVE-2021-24250: Business Directory Plugin < 5.11.2 - Authenticated Stored Cross-Site Scripting

Vendor Business Directory Team
Product Business Directory Plugin – Easy Listing Directories for WordPress
Weakness CWE-79 · XSS
Published May 5, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from lack of sanitisation in the label of the Form Fields, leading to Authenticated Stored Cross-Site Scripting issues across various pages of the plugin.

Key dates

02Disclosure timeline

May 5, 2021 CVE published
August 3, 2024 Record updated