PT-2023-28098 · WordPress · Directorist

Rafshanzani Suhada

·

CVE-2023-41798

·

Publicado

2023-11-07

·

Atualizado

2023-11-14

CVSS v3.1

5.1

Média

VetorAV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions Directorist – WordPress Business Directory Plugin with Classified Ads Listings versions 7.7.1 and earlier
Description The issue is related to the improper neutralization of formula elements in a CSV file, which affects the Directorist – WordPress Business Directory Plugin with Classified Ads Listings.
Recommendations For versions 7.7.1 and earlier, update to a version that contains a fix for this issue.

Exploit

Correção

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-1236

Identificadores relacionados

CVE-2023-41798

Produtos afetados

Directorist