CVE-2020-29304
- State
- Published
- Severity
- Not scored
- Published
- Dec 14, 2020
- Updated
- Aug 4, 2024
- Reserved
- Nov 27, 2020
Description
A cross-site scripting (XSS) vulnerability exists in the SabaiApps WordPress Directories Pro plugin version 1.3.45 and previous, allows attackers who have convinced a site administrator to import a specially crafted CSV file to inject arbitrary web script or HTML as the victim is proceeding through the file import workflow.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://directoriespro.com/directories-pro-1-3-46/
- 20201211 Self-reflected XSS in WordPress DirectoriesPro 1.3.45 plugin disclosure.mailing-list
- http://packetstormsecurity.com/files/160452/WordPress-DirectoriesPro-1.3.45-Cross-Site-Scripting.html
- https://www.themissinglink.com.au/security-advisories-cve-2020-29304
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.