QwikSec

Security Database

CVE

CWE

Training

CVE-2020-29304

Published: Dec 14, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

A cross-site scripting (XSS) vulnerability exists in the SabaiApps WordPress Directories Pro plugin version 1.3.45 and previous, allows attackers who have convinced a site administrator to import a specially crafted CSV file to inject arbitrary web script or HTML as the victim is proceeding through the file import workflow.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://directoriespro.com/directories-pro-1-3-46/

x_refsource_MISC

20201211 Self-reflected XSS in WordPress DirectoriesPro 1.3.45 plugin disclosure.

mailing-list

x_refsource_FULLDISC

http://packetstormsecurity.com/files/160452/WordPress-DirectoriesPro-1.3.45-Cross-Site-Scripting.html

x_refsource_MISC

https://www.themissinglink.com.au/security-advisories-cve-2020-29304

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.