Description (CNA)
The Connections Business Directory WordPress plugin before 9.7 does not validate or sanitise some connections' fields, which could lead to a CSV injection issue
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / Connections Business Directory | affected 9.7 before 9.7 |
CWE
CWE-1236
References
- https://github.com/Connections-Business-Directory/Connections/issues/474
- https://wpscan.com/vulnerability/dd394b55-c86f-4fa2-aae8-5903ca0b95ec
ADP enrichment
No English description supplied.