GCVE - cpe:2.3:a:directoriespro:directories

Approved changes feed: RSS · Atom

cpe:2.3:a:directoriespro:directories_pro:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor	Directoriespro (`3d73b8f4-df64-5fca-936d-c0009720d714`)
Product	Directories Pro (`1b2c0d05-2e1b-5a8f-add0-518e3ee71269`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-29304`	vulnerable	2026-06-08 05:24:58.089380	Details available A cross-site scripting (XSS) vulnerability exists in the SabaiApps WordPress Directories Pro plugin version 1.3.45 and previous, allows attackers who have convinced a site administrator to import a specially crafted CSV file to inject arbitrary web script or HTML as the victim is proceeding through the file import workflow. Published: 2020-12-14T19:48:28.000Z Updated: 2024-08-04T16:48:01.650Z Open on db.gcve.eu Reference links https://directoriespro.com/directories-pro-1-3-46/ http://seclists.org/fulldisclosure/2020/Dec/15 http://packetstormsecurity.com/files/160452/WordPress-DirectoriesPro-1.3.45-Cross-Site-Scripting.html https://www.themissinglink.com.au/security-advisories-cve-2020-29304	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.