Vulnerabilities > Strategy11 > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-05-06 CVE-2021-24250 Unspecified vulnerability in Strategy11 Business Directory Plugin - Easy Listing Directories
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from lack of sanitisation in the label of the Form Fields, leading to Authenticated Stored Cross-Site Scripting issues across various pages of the plugin.
network
low complexity
strategy11
5.4
2021-05-06 CVE-2021-24251 Unspecified vulnerability in Strategy11 Business Directory Plugin - Easy Listing Directories
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator update arbitrary payment history, such as change their status (from pending to completed to example)
network
low complexity
strategy11
4.3