← Back

Connections Business Directory

connections_business_directory

Vendor: Connections Pro • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-29437
1Connections Pro
1Connections Business Directory
Jun 17, 2026
Jun 26, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Steven A. Zahm Connections Business Directory plugin <= 10.4.36 versions.
CVE-2021-24794
1Connections Pro
1Connections Business Directory
Jun 17, 2026
Nov 1, 2021
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
The Connections Business Directory WordPress plugin before 10.4.3 does not escape the Address settings when creating an Entry, which could allow high privilege users to perform Cross-Site Scripting when the unfiltered_ht...Show more
The Connections Business Directory WordPress plugin before 10.4.3 does not escape the Address settings when creating an Entry, which could allow high privilege users to perform Cross-Site Scripting when the unfiltered_html capability is disallowed.Show less
CVE-2020-36503
1Connections Pro
1Connections Business Directory
Jun 17, 2026
Nov 1, 2021
N/A· v4
8.0 HIGH· v3
6.0 MEDIUM· v2
The Connections Business Directory WordPress plugin before 9.7 does not validate or sanitise some connections' fields, which could lead to a CSV injection issue