Connections Business Directory

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-29437 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Connections Business Directory

NVD

CVSS 3.1

5.4

EPSS

0.4%

CVE-2021-24794 MEDIUM POC This Month

The Connections Business Directory WordPress plugin before 10.4.3 does not escape the Address settings when creating an Entry, which could allow high privilege users to perform Cross-Site Scripting. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Connections Business Directory

NVD WPScan

CVSS 3.1

4.8

EPSS

0.7%

CVE-2023-29437

EPSS 0% CVSS 5.4

MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Connections Business Directory

NVD

CVE-2021-24794

EPSS 1% CVSS 4.8

MEDIUM POC This Month

WordPress XSS Connections Business Directory

NVD WPScan