CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
What the vulnerability does
The Business Directory Plugin plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 6.4.3 via the class-csv-exporter.php file. This allows authenticated attackers, with author-level permissions and above, to embed untrusted input into CSV files exported by administrators, which can result in code execution when these files are downloaded and opened on a local system with a vulnerable configuration.
Explanation of Vulnerability in Simple Terms
The Business Directory Plugin for WordPress versions 6.4.3 and earlier contains a vulnerability that allows authenticated users with low privileges to read sensitive data, modify content, or disrupt site availability. The vulnerability affects the entire WordPress installation due to scope change. Site administrators should update to a version newer than 6.4.3 as soon as possible.
What an attacker can do
Read sensitive data, modify content, or disrupt site availability across the WordPress installation.
Potential impact on your site
Compromised user accounts or low-privilege attackers can access private data, alter posts/pages, or cause service disruption.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., subscriber or contributor role).
Key dates
External resources
Related vulnerabilities
