CVE-2020-36503

HIGH

Connections Business Directory WP <9.7 - Code Injection

Title source: llm
STIX 2.1

Description

The Connections Business Directory WordPress plugin before 9.7 does not validate or sanitise some connections' fields, which could lead to a CSV injection issue

References (2)

Scores

CVSS v3 8.0
EPSS 0.0127
EPSS Percentile 79.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-1236
Status published
Products (1)
connections-pro/connections_business_directory 0.7.3.2 - 9.6
Published Nov 01, 2021
Tracked Since Feb 18, 2026